IT Exam Items Repository

What is the responsibility of the IT support group when handing an incident as defined by NIST?
ITExamAnswers Editorial Team asked 6 years ago • 
Which three things will a threat actor do to prepare a DDoS attack against a target system on the Internet? (Choose three.)
ITExamAnswers Editorial Team asked 6 years ago • 
Which attack surface, defined by the SANS Institute, is delivered through the exploitation of vulnerabilities in web, cloud, or host-based applications?
ITExamAnswers Editorial Team asked 6 years ago • 
What is the first line of defense when an organization is using a defense-in-depth approach to network security?
ITExam Editorial Team asked 6 years ago • 
Which SOC technology automates security responses by using predefined playbooks which require a minimum amount of human intervention?
ITExam Editorial Team asked 6 years ago • 
Refer to the exhibit. A security analyst is reviewing the logs of an Apache web server. Which action should the analyst take based on the output shown?
ITExamAnswers Editorial Team asked 6 years ago • 
Which three procedures in Sguil are provided to security analysts to address alerts? (Choose three.)
ITExamAnswers Editorial Team asked 6 years ago • 
Which application layer protocol is used to provide file-sharing and print services to Microsoft applications?
ITExamAnswers Editorial Team asked 7 years ago • 
Which management system implements systems that track the location and configuration of networked devices and software across an enterprise?
ITExamAnswers Editorial Team asked 6 years ago • 
What is the main purpose of exploitations by a threat actor through the weapon delivered to a target during the Cyber Kill Chain exploitation phase?
ITExamAnswers Editorial Team asked 6 years ago • 
Refer to the exhibit. A network administrator is examining a NetFlow record. Which protocol is in use in the flow shown?
ITExamAnswers Editorial Team asked 6 years ago • 
Refer to the exhibit. A network administrator is examining a NetFlow record. Why would the record indicate that both TRNS SOURCE PORT and TRNS DESTINATION PORT are 0?
ITExamAnswers Editorial Team asked 6 years ago • 
Refer to the exhibit. A security specialist is using Wireshark to review a PCAP file generated by tcpdump. When the client initiated a file download request, which source socket pair was used?
ITExamAnswers Editorial Team asked 6 years ago • 
Which regular expression would match any string that contains 4 consecutive zeros?
ITExamAnswers Editorial Team asked 6 years ago • 
A security analyst is reviewing information contained in a Wireshark capture created during an attempted intrusion. The analyst wants to correlate the Wireshark information with the log files from two servers that may have been compromised. What type of information can be used to correlate the events found in these multiple data sets?
ITExamAnswers Editorial Team asked 6 years ago • 
« Previous1…1,1351,1361,1371,1381,139…1,378Next »