QUESTION: 25 DRAG DROP

Drag and drop the NIST incident response process steps from the left onto the actions that occur in the steps on the right.

Select and Place:

Exhibit A:

Exhibit B:

Please refer to Exhibit B for the answer.

Answer(s): A

Reference:

https://www.securitymetrics.com/blog/6-phases-incident-response-plan

Reveal Solution Next Question

QUESTION: 26

Which command does an engineer use to set read/write/execute access on a folder for everyone who reaches the resource?

chmod 666
chmod 774
chmod 775
chmod 777

Answer(s): D

Reference:

https://www.pluralsight.com/blog/it-ops/linux-file-permissions

Reveal Solution Next Question

A SIEM tool fires an alert about a VPN connection attempt from an unusual location. The incident response team validates that an attacker has installed a remote access tool on a user’s laptop while traveling. The attacker has the user’s credentials and is attempting to connect to the network.

What is the next step in handling the incident?

Block the source IP from the firewall
Perform an antivirus scan on the laptop
Identify systems or services at risk
Identify lateral movement

Answer(s): C

Reveal Solution Next Question

QUESTION: 28

A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company’s infrastructure. Which steps should an engineer take at the recovery stage?

Determine the systems involved and deploy available patches
Analyze event logs and restrict network access
Review access lists and require users to increase password complexity
Identify the attack vector and update the IDS signature list

Answer(s): B

Reveal Solution Next Question

Free 350-201 Exam Braindumps (page: 8)

QUESTION: 25 DRAG DROP

Reference:

QUESTION: 26

Reference:

QUESTION: 27

QUESTION: 28

350-201 Discussions & Posts