QUESTION: 109

Attacker Lauren has gained the credentials of an organization’s internal server system, and she was often logging in during irregular times to monitor the network activities. The organization was skeptical about the login times and appointed security professional Robert to determine the issue. Robert analyzed the compromised device to find incident details such as the type of attack, its severity, target, impact, method of propagation, and vulnerabilities exploited.

What is the incident handling and response (IH&R) phase, in which Robert has determined these issues?

Incident triage
Preparation
Incident recording and assignment
Eradication

Answer(s): A

Reveal Solution Next Question

QUESTION: 110

At what stage of the cyber kill chain theory model does data exfiltration occur?

Weaponization
Actions on objectives
Command and control
Installation

Answer(s): B

Reveal Solution Next Question

QUESTION: 111

Johnson, an attacker, performed online research for the contact details of reputed cybersecurity firms. He found the contact number of sibertech.org and dialed the number, claiming himself to represent a technical support team from a vendor. He warned that a specific server is about to be compromised and requested sibertech.org to follow the provided instructions. Consequently, he prompted the victim to execute unusual commands and install malicious files, which were then used to collect and pass critical information to Johnson’s machine.

What is the social engineering technique Steve employed in the above scenario?

Diversion theft
Quid pro quo
Elicitation
Phishing

Answer(s): C

Reveal Solution Next Question

QUESTION: 112

An organization decided to harden its security against web-application and web-server attacks. John, a security personnel in the organization, employed a security scanner to automate web-application security testing and to guard the organization's web infrastructure against web-application threats. Using that tool, he also wants to detect XSS, directory transversal problems, fault injection, SQL injection, attempts to execute commands, and several other attacks.

Which of the following security scanners will help John perform the above task?

AlienVault® OSSIMTM
Syhunt Hybrid
Saleae Logic Analyzer
Cisco ASA

Answer(s): B

Reveal Solution Next Question

Free 312-50v13 Exam Braindumps (page: 29)

QUESTION: 109

QUESTION: 110

QUESTION: 111

QUESTION: 112

312-50v13 Exam Discussions & Posts