NEW QUESTION 79
___________________ record(s) user’s typing.

NEW QUESTION 80
Alexis works as an incident responder at XYZ organization. She was asked to identify and attribute the actors behind an attack that occurred recently. For this purpose, she is performing a type of threat attribution that deals with the identification of a specific person, society, or country sponsoring a well-planned and executed intrusion or attack on its target. Which of the following types of threat attributions is Alexis performing?

NEW QUESTION 81
An attacker traced out and found the kind of websites a target company/individual is frequently surfing and tested those particular websites to identify any possible vulnerabilities. When the attacker detected vulnerabilities in the website, the attacker started injecting malicious script/code into the web application that can redirect the webpage and download the malware onto the victim’s machine. After infecting the vulnerable web application, the attacker waited for the victim to access the infected web application.
Identify the type of attack performed by the attacker.

NEW QUESTION 82
Which of the following is not a countermeasure to eradicate cloud security incidents?

NEW QUESTION 83
Which stage of the incident response and handling process involves auditing the system and network log files?

NEW QUESTION 84
A user downloaded what appears to be genuine software. Unknown to her, when she installed the application, it executed code that provided an unauthorized remote attacker access to her computer.
What type of malicious threat displays this characteristic?

NEW QUESTION 85
Deleting malicious code and disabling breached user accounts are examples of which of the following?

NEW QUESTION 86
Which of the following is not a countermeasure to eradicate inappropriate usage incidents?

NEW QUESTION 87
Which stage of the incident response and handling process involves auditing the system and network log files?

NEW QUESTION 88
As an IT security officer, what is the first step you will take after discovering a successful email compromise?

NEW QUESTION 89
What is the best staffing model for an incident response team if current employees’ expertise is very low?

NEW QUESTION 90
Johnson an incident handler is working on a recent web application attack faced by the organization. As part of this process, he performed data preprocessing in order to analyzing and detecting the watering hole attack. He preprocessed the outbound network traffic data collected from firewalls and proxy servers and started analyzing the user activities within a certain time period to create time-ordered domain sequences to perform further analysis on sequential patterns.
Identify the data-preprocessing step performed by Johnson.

NEW QUESTION 91
Which of the following can be considered synonymous:

NEW QUESTION 92
Rose is an incident-handler and is responsible for detecting and eliminating any kind of scanning attempts over the network by malicious threat actors. Rose uses Wire shark to sniff the network and detect any malicious activities going on.
Which of the following Wireshark filters can be used by her to detect TCP Xmas scan attempt by the attacker?

NEW QUESTION 93
Which of the following is an appropriate flow of the incident recovery steps?

NEW QUESTION 94
Spyware tool used to record malicious user’s computer activities and keyboard stokes is called:

NEW QUESTION 95
Adam is an incident handler who intends to use DBCC LOG command to analyze a database and retrieve the active transaction log files for the specified database. The syntax of DBCC LOG command is DBCC LOG(, ), where the output parameter specifies the level of information an incident handler wants to retrieve. If Adam wants to retrieve the full information on each operation along with the hex dump of a current transaction row, which of the following output parameters should Adam use?

NEW QUESTION 96
Browser data can be used to access various credentials.
Which of the following tools is used to analyze the history data files in Microsoft Edge browser?

NEW QUESTION 97
In a DDoS attack, attackers first infect multiple systems, which are then used to attack a particular target directly. Those systems are called:

NEW QUESTION 98
CERT members can provide critical support services to first responders such as:

NEW QUESTION 99
A threat source does not present a risk if NO vulnerability that can be exercised for a particular threat source. Identify the step in which different threat sources are defined:

NEW QUESTION 100
Which of the following options describes common characteristics of phishing emails?

NEW QUESTION 101
Dan is a newly appointed information security professional in a renowned organization. He is supposed to follow multiple security strategies to eradicate malware incidents.
Which of the following is not considered as a good practice for maintaining information security and eradicating malware incidents?