IT Exam Items Repository In which phase of the NIST incident response life cycle is evidence gathered that can assist subsequent investigations by authorities?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat two shared sources of information are included within the MITRE ATT&CK framework? (Choose two.)ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich tool included in the Security Onion includes the capability of designing custom dashboards?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich tool included in the Security Onion provides a visual interface to NSM data?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich HIDS is integrated into the Security Onion and uses rules to detect changes in host-based operating parameters caused by malware through system calls?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat is the purpose for data reduction as it relates to NSM?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich statement describes a Cisco Web Security Appliance (WSA)?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat are the three outcomes of the NIST Cybersecurity Framework identify core function? (Choose three.)ITExam Editorial Team asked 6 years ago • CCNA CyberOpsAn administrator suspects polymorphic malware has successfully entered the network past the HIDS system perimeter. The polymorphic malware is, however, successfully identified and isolated. What must the administrator do to create signatures to prevent the file from entering the network again?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsMatch the NIST Cybersecurity Framework core function with the description. (Not all options are used.)ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat is the primary purpose of the Malware Information Sharing Platform (MISP) ?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat is CybOX?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhich two functions are provided by NetFlow? (Choose two.)ITExam Editorial Team asked 6 years ago • CCNA CyberOpsA white hat hacker is using a security tool called Skipfish to discover the vulnerabilities of a computer system. What type of tool is this?ITExam Editorial Team asked 6 years ago • CCNA CyberOpsWhat scenario describes a vulnerability broker?ITExam Editorial Team asked 6 years ago • CCNA CyberOps