Refer to the exhibit.

An engineer is analyzing this Cuckoo Sandbox report for a PDF file that has been downloaded from an email.
What is the state of this file?

• A.The file has an embedded Windows 32 executable and the Yara field lists suspicious features for further analysis.
• B.The file has an embedded executable and was matched by PEiD threat signatures for further analysis.
• C.The file has an embedded non-Windows executable but no suspicious features are identified.
• D.The file was matched by PEiD threat signatures but no suspicious features are identified since the signature list is up to date.

Comment: *

Name: *

Email: *

Verification: *

An engineer needs to configure network systems to detect command and control communications by decrypting ingress and egress perimeter traffic and allowing network security devices to detect malicious outbound communications. Which technology should be used to accomplish the task?

• A.cipher suite
• B.static IP addresses
• C.signatures
• D.digital certificates

Comment: *

Name: *

Email: *

Verification: *

An analyst is using the SIEM platform and must extract a custom property from a Cisco device and capture the phrase, "File: Clean." Which regex must the analyst import?

• A.File: Clean (.*)
• B.^File: Clean$
• C.^Parent File Clean$
• D.File: Clean

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

An analyst received this alert from the Cisco ASA device, and numerous activity logs were produced. How should this type of evidence be categorized?

• A.indirect
• B.circumstantial
• C.corroborative
• D.best

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

What is occurring in this network traffic?

• A.High rate of SYN packets being sent from a multiple source towards a single destination IP.
• B.High rate of ACK packets being sent from a single source IP towards multiple destination IPs.
• C.Flood of SYN packets coming from a single source IP to a single destination IP.
• D.Flood of ACK packets coming from a single source IP to multiple destination IPs.

Comment: *

Name: *

Email: *

Verification: *