問題1
The above Linux command is used to search for:
The above Linux command is used to search for:
正確答案: C
問題2
An organization's firewall has recently been bombarded with an excessive amount of failed requests.
A security analyst has been tasked with providing metrics on any failed attempts to ports above 1000.
Which of the following regular expressions will work BEST to identify an IP address with the desired port
range?
An organization's firewall has recently been bombarded with an excessive amount of failed requests.
A security analyst has been tasked with providing metrics on any failed attempts to ports above 1000.
Which of the following regular expressions will work BEST to identify an IP address with the desired port
range?
正確答案: A
問題3
Click the exhibit button. Which of the following Windows tools is executed?
Click the exhibit button. Which of the following Windows tools is executed?
正確答案: C
問題4
An organization's public information website has been defaced. The incident response team is actively
engaged in the following actions:
-Installing patches on the web server
-Turning off unnecessary services on web server
-Adding new ACL rules to the WAF
-Changing all passwords on web server accounts
Which of the following incident response phases is the team MOST likely conducting?
An organization's public information website has been defaced. The incident response team is actively
engaged in the following actions:
-Installing patches on the web server
-Turning off unnecessary services on web server
-Adding new ACL rules to the WAF
-Changing all passwords on web server accounts
Which of the following incident response phases is the team MOST likely conducting?
正確答案: C
問題5
An incident responder needs to quickly locate specific data in a large data repository. Which of the
following Linux tool should be used?
An incident responder needs to quickly locate specific data in a large data repository. Which of the
following Linux tool should be used?
正確答案: B
問題6
A system administrator needs to analyze a PCAP file on a Linux workstation where the use of GUI based
applications is restricted . Which of the following command line tools can the administrator use to analyze
the PCAP?
A system administrator needs to analyze a PCAP file on a Linux workstation where the use of GUI based
applications is restricted . Which of the following command line tools can the administrator use to analyze
the PCAP?
正確答案: B
問題7
Which of the following commands should be used to print out ONLY the second column of items in the
following file?
Source_File,txt
Alpha Whiskey
Bravo Tango
Charlie Foxtrot
Echo Oscar
Delta Roger
Which of the following commands should be used to print out ONLY the second column of items in the
following file?
Source_File,txt
Alpha Whiskey
Bravo Tango
Charlie Foxtrot
Echo Oscar
Delta Roger
正確答案: A
問題8
An organization performs regular updates to its network devices to alert and prevent access to streaming
media sites by the employees. Each device will send logs and alerts to a centralized server for storage,
archive, and analysis. Which of the following BEST describes the system that is correlating the data found
in all alerts and logs?
An organization performs regular updates to its network devices to alert and prevent access to streaming
media sites by the employees. Each device will send logs and alerts to a centralized server for storage,
archive, and analysis. Which of the following BEST describes the system that is correlating the data found
in all alerts and logs?
正確答案: D
問題9
While a network administrator is monitoring the company network, an unknown local IP address is starting
to release high volumes of anonymous traffic to an unknown external IP address. Which of the following
would indicate to the network administrator potential compromise?
While a network administrator is monitoring the company network, an unknown local IP address is starting
to release high volumes of anonymous traffic to an unknown external IP address. Which of the following
would indicate to the network administrator potential compromise?
正確答案: A
問題10
An organization needs to determine of any systems on its network (10.0.25.0/24) have web services
running on port 80 or 443. Which of the following is the BEST command to do this?
An organization needs to determine of any systems on its network (10.0.25.0/24) have web services
running on port 80 or 443. Which of the following is the BEST command to do this?
正確答案: B