Q56. Juliea a SOC analyst, while monitoring logs, noticed large TXT, NULL payloads.
What does this indicate?

Q57. According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?

Q58. What does HTTPS Status code 403 represents?

Q59. Identify the attack in which the attacker exploits a target system through publicly known but still unpatched vulnerabilities.

Q60. David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not able to find any suspicious events.
This type of incident is categorized into?

Q61. Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

Q62. Properly applied cyber threat intelligence to the SOC team help them in discovering TTPs.
What does these TTPs refer to?

Q63. Juliea a SOC analyst, while monitoring logs, noticed large TXT, NULL payloads.
What does this indicate?

Q64. Which of the following is a report writing tool that will help incident handlers to generate efficient reports on detected incidents during incident response process?

Q65. Harley is working as a SOC analyst with Powell Tech. Powell Inc. is using Internet Information Service (IIS) version 7.0 to host their website.
Where will Harley find the web server logs, if he wants to investigate them for any anomalies?

Q66. Which of the following is a Threat Intelligence Platform?

Q67. Which of the following attack inundates DHCP servers with fake DHCP requests to exhaust all available IP addresses?

Q68. Which encoding replaces unusual ASCII characters with “%” followed by the character’s two-digit ASCII code expressed in hexadecimal?

Q69. Which of the following formula is used to calculate the EPS of the organization?

Q70. Which of the following formula represents the risk?

Q71. What does [-n] in the following checkpoint firewall log syntax represents?
fw log [-f [-t]] [-n] [-l] [-o] [-c action] [-h host] [-s starttime] [-e endtime] [-b starttime endtime] [-u unification_scheme_file] [-m unification_mode(initial|semi|raw)] [-a] [-k (alert name|all)] [-g] [logfile]

Q72. David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not able to find any suspicious events.
This type of incident is categorized into?

Q73. Which of the following formula is used to calculate the EPS of the organization?

Q74. Which of the following can help you eliminate the burden of investigating false positives?

Q75. Which of the following formula represents the risk?

Q76. Which of the following framework describes the essential characteristics of an organization’s security engineering process that must exist to ensure good security engineering?