IT Questions Bank

Mar 16, 2020 Last Updated: Jun 29, 2023 No Comments
Tweet Share Pin it

IT Questions Bank 1

IT Questions Bank › Category: CCNA CyberOps
Which three procedures in Sguil are provided to security analysts to address alerts? (Choose three.)
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Which application layer protocol is used to provide file-sharing and print services to Microsoft applications?
IT Questions Bank 2ITExamAnswers asked 4 years ago • 
Which management system implements systems that track the location and configuration of networked devices and software across an enterprise?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
What is the main purpose of exploitations by a threat actor through the weapon delivered to a target during the Cyber Kill Chain exploitation phase?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Refer to the exhibit. A network administrator is examining a NetFlow record. Which protocol is in use in the flow shown?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Refer to the exhibit. A network administrator is examining a NetFlow record. Why would the record indicate that both TRNS SOURCE PORT and TRNS DESTINATION PORT are 0?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Refer to the exhibit. A security specialist is using Wireshark to review a PCAP file generated by tcpdump. When the client initiated a file download request, which source socket pair was used?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Which regular expression would match any string that contains 4 consecutive zeros?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
A security analyst is reviewing information contained in a Wireshark capture created during an attempted intrusion. The analyst wants to correlate the Wireshark information with the log files from two servers that may have been compromised. What type of information can be used to correlate the events found in these multiple data sets?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Which type of cyber attack is a form of MiTM in which the perpetrator copies IP packets off the network without modifying them?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Which type of evasion technique splits malicious payloads into smaller packets in order to bypass security sensors that do not reassemble the payloads before scanning them?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
What are two motivating factors for nation-state sponsored threat actors? (Choose two.)
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Using Tcpdump and Wireshark, a security analyst extracts a downloaded file from a pcap file. The analyst suspects that the file is a virus and wants to know the file type for further examination. Which Linux command can be used to determine the file type?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
Which three fields are found in both the TCP and UDP headers? (Choose three.)
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
What will match the regular expression ^83?
IT Questions Bank 2ITExamAnswers asked 3 years ago • 
« Previous1…5152535455…95Next »
Ask Question