What are two differences in how tampered and untampered disk images affect a security incident? (Choose two.)

• A.Untampered images are used in the security investigation process
• B.Tampered images are used in the security investigation process
• C.The image is tampered if the stored hash and the computed hash match
• D.Tampered images are used in the incident recovery process
• E.The image is untampered if the stored hash and the computed hash match

Comment: *

Name: *

Email: *

Verification: *

What is a sandbox interprocess communication service?

• A.A collection of interfaces that allow for coordination of activities among processes.
• B.A collection of host services that allow for communication between sandboxes.
• C.A collection of network services that are activated on an interface, allowing for inter-port communication.
• D.A collection of rules within the sandbox that prevent the communication between sandboxes.

Comment: *

Name: *

Email: *

Verification: *

What is the difference between deep packet inspection and stateful inspection?

• A.Deep packet inspection is more secure than stateful inspection on Layer 4
• B.Stateful inspection verifies contents at Layer 4 and deep packet inspection verifies connection at Layer 7
• C.Stateful inspection is more secure than deep packet inspection on Layer 7
• D.Deep packet inspection allows visibility on Layer 7 and stateful inspection allows visibility on Layer 4

Comment: *

Name: *

Email: *

Verification: *

A SOC analyst is investigating an incident that involves a Linux system that is identifying specific sessions.
Which identifier tracks an active program?

• A.application identification number
• B.process identification number
• C.runtime identification number
• D.active process identification number

Comment: *

Name: *

Email: *

Verification: *

Which type of verification consists of using tools to compute the message digest of the original and copied data, then comparing the similarity of the digests?

• A.data integrity
• B.data preservation
• C.volatile data collection
• D.evidence collection order

Comment: *

Name: *

Email: *

Verification: *