What does an attacker use to determine which network ports are listening on a potential target device?

• A.man-in-the-middle
• B.port scanning
• C.SQL injection
• D.ping sweep

Comment: *

Name: *

Email: *

Verification: *

What describes the impact of false-positive alerts compared to false-negative alerts?

• A.A false positive is an event alerting for a brute-force attack An engineer investigates the alert and discovers that a legitimate user entered the wrong credential several times A false negative is when a threat actor tries to brute-force attack a system and no alert is raised.
• B.A false negative is a legitimate attack triggering a brute-force alert. An engineer investigates the alert and finds out someone intended to break into the system A false positive is when no alert and no attack is occurring
• C.A false negative is alerting for an XSS attack. An engineer investigates the alert and discovers that an XSS attack happened A false positive is when an XSS attack happens and no alert is raised
• D.A false positive is an event alerting for an SQL injection attack An engineer investigates the alert and discovers that an attack attempt was blocked by IPS A false negative is when the attack gets detected but succeeds and results in a breach.

Comment: *

Name: *

Email: *

Verification: *

What are two differences between tampered disk images and untampered disk images'? (Choose two.)

• A.Tampered Images are used in a security investigation process
• B.The image is untampered if the existing stored hash matches the computed one
• C.The image is tampered if the stored hash and the computed hash are identical
• D.Untampered images can be used as law enforcement evidence.
• E.Tampered images are used as an element for the root cause analysis report

Comment: *

Name: *

Email: *

Verification: *

Which type of data consists of connection level, application-specific records generated from network traffic?

• A.transaction data
• B.location data
• C.statistical data
• D.alert data

Comment: *

Name: *

Email: *

Verification: *

According to CVSS, what is a description of the attack vector score?

• A.It depends on how many physical and logical manipulations are possible on a vulnerable component
• B.The metric score will be larger when a remote attack is more likely.
• C.It depends on how far away the attacker is located and the vulnerable component
• D.The metric score will be larger when it is easier to physically touch or manipulate the vulnerable component

Comment: *

Name: *

Email: *

Verification: *