NEW QUESTION 55
A network security analyst has noticed a flood of Simple Mail Transfer Protocol (SMTP) traffic to internal clients. SMTP traffic should only be allowed to email servers. Which of the following commands would stop this attack? (Choose two.)

NEW QUESTION 56
An incident response team is concerned with verifying the integrity of security information and event management (SIEM) events after being written to disk. Which of the following represents the BEST option for addressing this concern?

NEW QUESTION 57
During which of the following attack phases might a request sent to port 1433 over a whole company network be seen within a log?

NEW QUESTION 58
A cybersecurity expert assigned to be the IT manager of a middle-sized company discovers that there is little endpoint security implementation on the company’s systems. Which of the following could be included in an endpoint security solution? (Choose two.)

NEW QUESTION 59
Which of the following types of attackers would be MOST likely to use multiple zero-day exploits executed against high-value, well-defended targets for the purposes of espionage and sabotage?

NEW QUESTION 60
Which of the following describes United States federal government cybersecurity policies and guidelines?

NEW QUESTION 61
Which of the following, when exposed together, constitutes PII? (Choose two.)

NEW QUESTION 62
Which of the following does the command nmap -open 10.10.10.3 do?

NEW QUESTION 63
After successfully enumerating the target, the hacker determines that the victim is using a firewall. Which of the following techniques would allow the hacker to bypass the intrusion prevention system (IPS)?

NEW QUESTION 64
While performing routing maintenance on a Windows Server, a technician notices several unapproved Windows Updates and that remote access software has been installed. The technician suspects that a malicious actor has gained access to the system. Which of the following steps in the attack process does this activity indicate?

NEW QUESTION 65
Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

NEW QUESTION 66
An administrator believes that a system on VLAN 12 is Address Resolution Protocol (ARP) poisoning clients on the network. The administrator attaches a system to VLAN 12 and uses Wireshark to capture traffic. After reviewing the capture file, the administrator finds no evidence of ARP poisoning. Which of the following actions should the administrator take next?

NEW QUESTION 67
Which of the following is an automated password cracking technique that uses a combination of uppercase and lowercase letters, 0-9 numbers, and special characters?

NEW QUESTION 68
Which common source of vulnerability should be addressed to BEST mitigate against URL redirection attacks?

NEW QUESTION 69
Which of the following methods are used by attackers to find new ransomware victims? (Choose two.)

NEW QUESTION 70
Various logs are collected for a data leakage case to make a forensic analysis. Which of the following are MOST important for log integrity? (Choose two.)

NEW QUESTION 71
A user receives an email about an unfamiliar bank transaction, which includes a link. When clicked, the link redirects the user to a web page that looks exactly like their bank’s website and asks them to log in with their username and password. Which type of attack is this?

NEW QUESTION 72
According to Payment Card Industry Data Security Standard (PCI DSS) compliance requirements, an organization must retain logs for what length of time?

NEW QUESTION 73
After a hacker obtained a shell on a Linux box, the hacker then sends the exfiltrated data via Domain Name System (DNS). This is an example of which type of data exfiltration?

NEW QUESTION 74
Which of the following is a cybersecurity solution for insider threats to strengthen information protection?

NEW QUESTION 75
Detailed step-by-step instructions to follow during a security incident are considered:

NEW QUESTION 76
Which of the following data sources could provide indication of a system compromise involving the exfiltration of data to an unauthorized destination?

NEW QUESTION 77
A company that maintains a public city infrastructure was breached and information about future city projects was leaked. After the post-incident phase of the process has been completed, which of the following would be PRIMARY focus of the incident response team?

NEW QUESTION 78
Which of the following attacks involves sending a large amount of spoofed User Datagram Protocol (UDP) traffic to a router’s broadcast address within a network?

NEW QUESTION 79
Which of the following are part of the hardening phase of the vulnerability assessment process? (Choose two.)