Question 6
Which event is a vishing attack?
Question 7
Which type of evidence supports a theory or an assumption that results from initial evidence?
Question 8
Refer to the exhibit.
Which two elements in the table are parts of the 5-tuple? (Choose two.)
Which two elements in the table are parts of the 5-tuple? (Choose two.)
Question 9
An analyst is investigating an incident in a SOC environment.
Which method is used to identify a session from a group of logs?
Which method is used to identify a session from a group of logs?
Question 10
A threat actor penetrated an organization's network. Using the 5-tuple approach, which data points should the analyst use to isolate the compromised host in a grouped set of logs?