IT Exam Items Repository Which of the following is not an example of reconnaissance?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich goal of data normalization is true?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich of the following is one of the main goals of the CSIRT?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich network device creates and sends the initial packet of a session?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich identifies both the source and destination location?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich netstat command show ports?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsYou receive an alert for malicious code that exploits Internet Explorer and runs arbitrary code on the site visitor machine. The malicious code is on an external site that is being visited by hosts on your network. Which user agent in the HTTP headers in the requests from your internal hosts warrants further investigation?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhat is the definition of confidentiality according to CVSSv3 framework?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsDuring which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich CVSSv3 Attack Vector metric value requires the attacker to physically touch or manipulate the vulnerable component?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsA CMS plugin creates two files that are accessible from the Internet myplugin.html and exploitable.php. A newly discovered exploit takes advantage of an injection vulnerability in exploitable.php. To exploit the vulnerability, one must send an HTTP POST with specific variables to exploitable.php. You see traffic to your webserver that consists of only HTTP GET requests to myplugin.html. Which category best describes this activity?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich of the following can be identified by correlating DNS intelligence and other security events? (Choose two)ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhat attribute belonging VERIS schema?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsFiltering ports in Wireshark?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhen performing threat hunting against a DNS server, which traffic toward the affected domain is considered a starting point?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOps