212-89 Exam Question 141
As an incident handler, you are responsible for managing unauthorized access incidents. After a series of reconnaissance attacks on your network, you have employed tools such as Wireshark and Nmap to detect the incidents. During one such scenario, you notice an IP address,
10.10.10.9, has been repeatedly conducting ICMP echo requests and TCP SYN scans. What would be your immediate course of action to mitigate the situation?
10.10.10.9, has been repeatedly conducting ICMP echo requests and TCP SYN scans. What would be your immediate course of action to mitigate the situation?
212-89 Exam Question 142
FinServ, a financial services firm, experienced a significant malware attack. Once the immediate threat was contained, a massive cleanup ensued. A board meeting was convened to determine the final steps to ensure system integrity. Among the proposed solutions, which ensures a thorough eradication of malware?
212-89 Exam Question 143
A company utilizing multiple cloud services aims to enhance its posture against cloud security incidents. Among the following options, which constitutes the best practice for achieving this goal?
212-89 Exam Question 144
Eric works as a system administrator in ABC organization. He granted privileged users with unlimited permissions to access the systems. These privileged users can misuse their rights unintentionally or maliciously or attackers can trick them to perform malicious activities. Which of the following guidelines helps incident handlers to eradicate insider attacks by privileged users?
212-89 Exam Question 145
Which of the following is a term that describes the combination of strategies and services intended to restore data, applications, and other resources to the public cloud or dedicated service providers?