312-39 Exam Question 16

Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.
Identify the stage in which he is currently in.
  • 312-39 Exam Question 17

    Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?
  • 312-39 Exam Question 18

    Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry:
    May 06 2018 21:27:27 asa 1: %ASA -5 - 11008: User 'enable_15' executed the 'configure term' command What does the security level in the above log indicates?
  • 312-39 Exam Question 19

    Juliea a SOC analyst, while monitoring logs, noticed large TXT, NULL payloads.
    What does this indicate?
  • 312-39 Exam Question 20

    If the SIEM generates the following four alerts at the same time:
    I.Firewall blocking traffic from getting into the network alerts
    II.SQL injection attempt alerts
    III.Data deletion attempt alerts
    IV.Brute-force attempt alerts
    Which alert should be given least priority as per effective alert triaging?