An incident responder receives a call from a user who reports a computer is exhibiting symptoms consistent with a malware infection. Which of the following steps should the responder perform NEXT?

• A.Use a remote desktop client to collect and analyze the malware in real time.
• B.Ask the user to back up files for later recovery.
• C.Request the user capture and provide a screenshot or recording of the symptoms.
• D.Capture and document necessary information to assist in the response.

Comment: *

Name: *

Email: *

Verification: *

A new firewall has been places into service at an organization. However, a configuration has not been
entered on the firewall. Employees on the network segment covered by the new firewall report they are
unable to access the network. Which of the following steps should be completed to BEST resolve the
issue?

• A.The firewall should be configured to prevent user traffic form matching the implicit deny rule.
• B.The firewall should be configured to include an explicit deny rule.
• C.The firewall should be configured with access lists to allow inbound and outbound traffic.
• D.The firewall should be configured with port security to allow traffic.

Comment: *

Name: *

Email: *

Verification: *

The network information for a workstation is as follows:

When the workstation's user attempts to access www.example.com. the URL that actually opens is www.notexample.com. The user successfully connects to several other legitimate URLs. Which of the following have MOST likely occurred? (Select TWO).

• A.DNS poisoning
• B.ARP poisoning
• C.Buffer overflow
• D.IP spoofing
• E.Domain hijacking

Comment: *

Name: *

Email: *

Verification: *

A user clicked an email link that led to a website that infected the workstation with a virus.
The virus encrypted all the network shares to which the user had access. The virus was not detected or blocked by the company's email filter, website filter, or antivirus.
Which of the following describes what occurred?

• A.Improper error handling triggered a false negative in all three controls
• B.The virus was a zero-day attack
• C.The email originated from a private email server with no malware protection

Comment: *

Name: *

Email: *

Verification: *

A security engineer is setting up passwordless authentication for the first time.
INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *