Get Perfect Results with Premium 312-39 Dumps Updated 102 Questions
Free 312-39 Exam Study Guide for the NEW Dumps Test Engine
NEW QUESTION # 31
Which of the following Windows event is logged every time when a user tries to access the "Registry" key?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
NEW QUESTION # 32
Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown:
http://www.terabytes.com/process.php./../../../../etc/passwd
- A. Form Tampering Attack
- B. Denial-of-Service Attack
- C. SQL Injection Attack
- D. Directory Traversal Attack
Answer: D
Explanation:
NEW QUESTION # 33
Which of the following security technology is used to attract and trap people who attempt unauthorized or illicit utilization of the host system?
- A. Firewall
- B. De-Militarized Zone (DMZ)
- C. Honeypot
- D. Intrusion Detection System
Answer: C
NEW QUESTION # 34
In which of the following incident handling and response stages, the root cause of the incident must be found from the forensic results?
- A. Evidence Gathering
- B. Evidence Handling
- C. Eradication
- D. Systems Recovery
Answer: A
NEW QUESTION # 35
Which attack works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?
- A. Birthday Attack
- B. Rainbow Table Attack
- C. Bruteforce Attack
- D. Hybrid Attack
Answer: C
NEW QUESTION # 36
Which of the following is a Threat Intelligence Platform?
- A. Keepnote
- B. SolarWinds MS
- C. TC Complete
- D. Apility.io
Answer: C
Explanation:
NEW QUESTION # 37
Which of the following tool is used to recover from web application incident?
- A. Proxy Workbench
- B. CrowdStrike FalconTM Orchestrator
- C. Smoothwall SWG
- D. Symantec Secure Web Gateway
Answer: B
Explanation:
NEW QUESTION # 38
Which of the following attack can be eradicated by filtering improper XML syntax?
- A. Insufficient Logging and Monitoring Attacks
- B. CAPTCHA Attacks
- C. SQL Injection Attacks
- D. Web Services Attacks
Answer: C
NEW QUESTION # 39
Ray is a SOC analyst in a company named Queens Tech. One Day, Queens Tech is affected by a DoS/DDoS attack. For the containment of this incident, Ray and his team are trying to provide additional bandwidth to the network devices and increasing the capacity of the servers.
What is Ray and his team doing?
- A. Absorbing the Attack
- B. Degrading the services
- C. Diverting the Traffic
- D. Blocking the Attacks
Answer: A
NEW QUESTION # 40
Which of the following technique involves scanning the headers of IP packets leaving a network to make sure that the unauthorized or malicious traffic never leaves the internal network?
- A. Rate Limiting
- B. Throttling
- C. Ingress Filtering
- D. Egress Filtering
Answer: D
NEW QUESTION # 41
Which of the following is a set of standard guidelines for ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection?
- A. DARPA
- B. FISMA
- C. PCI-DSS
- D. HIPAA
Answer: C
NEW QUESTION # 42
Which of the following threat intelligence is used by a SIEM for supplying the analysts with context and
"situational awareness" by using threat actor TTPs, malware campaigns, tools used by threat actors.
1.Strategic threat intelligence
2.Tactical threat intelligence
3.Operational threat intelligence
4.Technical threat intelligence
- A. 3 and 4
- B. 1 and 2
- C. 2 and 3
- D. 1 and 3
Answer: C
NEW QUESTION # 43
Which of the following command is used to enable logging in iptables?
- A. $ iptables -B OUTPUT -j LOG
- B. $ iptables -A INPUT -j LOG
- C. $ iptables -A OUTPUT -j LOG
- D. $ iptables -B INPUT -j LOG
Answer: B
Explanation:
NEW QUESTION # 44
Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?
- A. Planning and budgeting -> Physical location and structural design considerations -> Forensics lab licensing ->Work area considerations -> Human resource considerations -> Physical security recommendations
- B. Planning and budgeting -> Physical location and structural design considerations -> Work area considerations -> Human resource considerations -> Physical security recommendations -> Forensics lab licensing
- C. Planning and budgeting -> Forensics lab licensing -> Physical location and structural design considerations -> Work area considerations -> Physical security recommendations -> Human resource considerations
- D. Planning and budgeting -> Physical location and structural design considerations-> Forensics lab licensing -> Human resource considerations -> Work area considerations -> Physical security recommendations
Answer: B
NEW QUESTION # 45
Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?
- A. Cloud, Self-Managed
- B. Self-hosted, MSSP Managed
- C. Self-hosted, Self-Managed
- D. Hybrid Model, Jointly Managed
Answer: A
Explanation:
NEW QUESTION # 46
Peter, a SOC analyst with Spade Systems, is monitoring and analyzing the router logs of the company and wanted to check the logs that are generated by access control list numbered 210.
What filter should Peter add to the 'show logging' command to get the required output?
- A. show logging | include 210
- B. show logging | forward 210
- C. show logging | route 210
- D. show logging | access 210
Answer: A
NEW QUESTION # 47
Which of the following is a Threat Intelligence Platform?
- A. SolarWinds MS
- B. Keepnote
- C. Apility.io
- D. TC Complete
Answer: A
NEW QUESTION # 48
In which log collection mechanism, the system or application sends log records either on the local disk or over the network.
- A. rule-based
- B. pull-based
- C. signature-based
- D. push-based
Answer: D
Explanation:
NEW QUESTION # 49
Which of the following can help you eliminate the burden of investigating false positives?
- A. Not trusting the security devices
- B. Ingesting the context data
- C. Treating every alert as high level
- D. Keeping default rules
Answer: B
Explanation:
NEW QUESTION # 50
According to the forensics investigation process, what is the next step carried out right after collecting the evidence?
- A. Call Organizational Disciplinary Team
- B. Create a Chain of Custody Document
- C. Send it to the nearby police station
- D. Set a Forensic lab
Answer: B
NEW QUESTION # 51
Jane, a security analyst, while analyzing IDS logs, detected an event matching Regex /((\%3C)|<)((\%69)|i|(\%
49))((\%6D)|m|(\%4D))((\%67)|g|(\%47))[^\n]+((\%3E)|>)/|.
What does this event log indicate?
- A. Parameter Tampering Attack
- B. SQL Injection Attack
- C. XSS Attack
- D. Directory Traversal Attack
Answer: C
NEW QUESTION # 52
Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?
- A. Command Injection Attacks
- B. File Injection Attacks
- C. LDAP Injection Attacks
- D. SQL Injection Attacks
Answer: D
NEW QUESTION # 53
Which of the following threat intelligence helps cyber security professionals such as security operations managers, network operations center and incident responders to understand how the adversaries are expected to perform the attack on the organization, and the technical capabilities and goals of the attackers along with the attack vectors?
- A. Operational Threat Intelligence
- B. Strategic Threat Intelligence
- C. Analytical Threat Intelligence
- D. Tactical Threat Intelligence
Answer: D
NEW QUESTION # 54
What does the HTTP status codes 1XX represents?
- A. Redirection
- B. Client error
- C. Informational message
- D. Success
Answer: C
NEW QUESTION # 55
What is the correct sequence of SOC Workflow?
- A. Collect, Ingest, Validate, Report, Respond, Document
- B. Collect, Ingest, Document, Validate, Report, Respond
- C. Collect, Ingest, Validate, Document, Report, Respond
- D. Collect, Respond, Validate, Ingest, Report, Document
Answer: C
NEW QUESTION # 56
......
312-39 PDF Dumps Extremely Quick Way Of Preparation: https://www.exam4tests.com/312-39-valid-braindumps.html
Download 312-39 Dumps (2023) - Free PDF Exam Demo: https://drive.google.com/open?id=1Kk_V2Q11LwEKql4aX4Iu0kHz__mDTm56