IT Exam Items Repository When dealing with a security threat and using the Cyber Kill Chain model, which two approaches can an organization use to help block potential exploitations on a system? (Choose two.)ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich meta-feature element in the Diamond Model describes tools and information (such as software, black hat knowledge base, and username and password) that the adversary uses for the intrusion event?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich three aspects of a target system are most likely to be exploited after a weapon is delivered? (Choose three.)ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich NIST incident response life cycle phase includes training for the computer security incident response team on how to respond to an incident?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsA technician is troubleshooting a Windows 10 laptop infected with a virus that has damaged the master boot record. The technician has booted the laptop using the installation media and is attempting to repair the laptop from the command line interface. Which command can the technician use to repair the corrupt master boot record?ITExam Editorial Team asked 6 years ago • IT EssentialsWhich FHRP implementation is a nonproprietary IPv4-only election protocol with limited scalability?ITExam Editorial Team asked 6 years ago • CCNARefer to the exhibit. Based on the LACP neighbor status, in which mode is the SW1 port channel configured?ITExamAnswers Editorial Team asked 7 years ago • CCNAA user calls the help desk reporting that a laptop with Linux freezes on startup and displays kernel panic. What could cause this problem?ITExamAnswers Editorial Team asked 6 years ago • IT EssentialsWhat is a characteristic of a routed port that is configured on a Cisco switch?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat action does an Ethernet switch take when it receives a frame with an unknown Layer 2 source address?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsRefer to the exhibit. A network security analyst is examining captured data using Wireshark. The captured frames indicate that a host is downloading malware from a server. Which source port is used by the host to request the download?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat is the tool that has alert records linked directly to the search functionality of the Enterprise Log Search and Archive (ELSA)?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsRefer to the exhibit. A network security analyst is using the Follow TCP Stream feature in Wireshark to rebuild the TCP transaction. However, the transaction data seems indecipherable. What is the explanation for this?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich statement describes the status after the Security Onion VM is started?ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOpsWhich two strings will be matched by the regular expression? (Choose two.) Level[^12]ITExamAnswers Editorial Team asked 6 years ago • CCNA CyberOps