QUESTION: 29

A patient views information that is not theirs when they sign in to the hospital’s online portal. The patient calls the support center at the hospital but continues to be put on hold because other patients are experiencing the same issue. An incident has been declared, and an engineer is now on the incident bridge as the CyberOps Tier 3 Analyst. There is a concern about the disclosure of PII occurring in real-time. What is the first step the analyst should take to address this incident?

Evaluate visibility tools to determine if external access resulted in tampering
Contact the third-party handling provider to respond to the incident as critical
Turn off all access to the patient portal to secure patient records
Review system and application logs to identify errors in the portal code

Answer(s): C

Reveal Solution Next Question

QUESTION: 30

Refer to the exhibit. What results from this script?

Seeds for existing domains are checked
A search is conducted for additional seeds
Domains are compared to seed rules
A list of domains as seeds is blocked

Answer(s): B

Reveal Solution Next Question

QUESTION: 31 DRAG DROP

Drag and drop the threat from the left onto the scenario that introduces the threat on the right. Not all options are used.

Select and Place:

Exhibit A:

Exhibit B: