An analyst is searching a log for potential credit card leaks. The log stores all data encoded in hexadecimal. Which of the following commands will allow the security analyst to confirm the incident?

• A.cat log | xxd -r -p egrep '(0-9) (16)'
• B.egrep '(3(0-9)) (16) ' log
• C.egrep ' (0-9) (16) ' log | xxdc
• D.cat log xxd -r -p | egrep ' [0-9] {16}

Comment: *

Name: *

Email: *

Verification: *

Some hard disks need to be taken as evidence for further analysis during an incident response Which of the following procedures must be completed FIRST for this type of evtdertce acquisition?

• A.Build the chain-of-custody document, noting the media model senal number size vendor, date, and time of acquisition
• B.Execute the command #dd if=/dev/ada of=/dev/adc ba=5i2 to clone the evidence data to external media to prevent any further change
• C.Extract the hard drives from the compromised machines and then plug them into a forensics machine to apply encryption over the stored data to protect it from non-authorized access
• D.Perform a disk sanitation using the command 8dd if=/d«T/z«ro of=/d»T/«dc b»=iM over the media that wil receive a copy of the coHected data

Comment: *

Name: *

Email: *

Verification: *

A security analyst is correlating, ranking, and enriching raw data into a report that will be interpreted by humans or machines to draw conclusions and create actionable recommendations Which of the following steps in the intelligence cycle is the security analyst performing?

• A.Analysis and production
• B.Processing and exploitation
• C.Planning and direction
• D.Data collection
• E.Dissemination and evaluation

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Security Officer has asked for a list of hosts that have critical and high-severity findings as referenced in the CVE database. Which of the following tools would produce the assessment output needed to satisfy this request?

• A.Fuzzer
• B.Wireshark
• C.Nessus
• D.Prowler
• E.Nikto

Comment: *

Name: *

Email: *

Verification: *

Which of the following software assessment methods would be BEST for gathering data related to an application's availability during peak times?

• A.Static analysis testing
• B.User acceptance testing
• C.Stress testing
• D.Dynamic analysis testing
• E.Security regression testing

Comment: *

Name: *

Email: *

Verification: *