QUESTION 38
Which of the following directory will contain logs related to printer access?

QUESTION 39
Ray is a SOC analyst in a company named Queens Tech. One Day, Queens Tech is affected by a DoS/DDoS attack. For the containment of this incident, Ray and his team are trying to provide additional bandwidth to the network devices and increasing the capacity of the servers.
What is Ray and his team doing?

QUESTION 40
An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company’s URL as follows:
http://technosoft.com.com/<script>alert(“WARNING: The application has encountered an error”);</script>.
Identify the attack demonstrated in the above scenario.

QUESTION 41
John, SOC analyst wants to monitor the attempt of process creation activities from any of their Windows endpoints.
Which of following Splunk query will help him to fetch related logs associated with process creation?

QUESTION 42
Identify the attack in which the attacker exploits a target system through publicly known but still unpatched vulnerabilities.

QUESTION 43
Which of the following attack inundates DHCP servers with fake DHCP requests to exhaust all available IP addresses?

QUESTION 44
Which of the following factors determine the choice of SIEM architecture?

QUESTION 45
An organization is implementing and deploying the SIEM with following capabilities.

What kind of SIEM deployment architecture the organization is planning to implement?

QUESTION 46
A type of threat intelligent that find out the information about the attacker by misleading them is known as
.

QUESTION 47
What does the Security Log Event ID 4624 of Windows 10 indicate?

QUESTION 48
Which of the following are the responsibilities of SIEM Agents?
1.Collecting data received from various devices sending data to SIEM before forwarding it to the central engine.
2.Normalizing data received from various devices sending data to SIEM before forwarding it to the central engine.
3.Co-relating data received from various devices sending data to SIEM before forwarding it to the central engine.
4.Visualizing data received from various devices sending data to SIEM before forwarding it to the central engine.

QUESTION 49
Which of the log storage method arranges event logs in the form of a circular buffer?

QUESTION 50
What type of event is recorded when an application driver loads successfully in Windows?

QUESTION 51
Harley is working as a SOC analyst with Powell Tech. Powell Inc. is using Internet Information Service (IIS) version 7.0 to host their website.
Where will Harley find the web server logs, if he wants to investigate them for any anomalies?

QUESTION 52
Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?