Question 21

Refer to the exhibit.

What does the message indicate?
  • Question 22

    A security specialist is investigating an incident regarding a recent major breach in the organization. The accounting data from a 24-month period is affected due to a trojan detected in a department's critical server. A security analyst investigates the incident and discovers that an incident response team member who detected a trojan during regular AV scans had made an image of the server for evidence purposes. The security analyst made an image again to compare the hashes of the two images, and they appeared to differ and do not match.
    Which type of evidence is the security analyst dealing with?
  • Question 23

    Which security monitoring data type requires the largest storage space?
  • Question 24

    Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.

    Question 25

    What is a benefit of agent-based protection when compared to agentless protection?