Question 61
Refer to the exhibit.

What is occurring?

What is occurring?
Question 62
A large load of data is being transferred to an external destination via UDP 53 port. Which obfuscation technique is used?
Question 63

Refer to the exhibit. A SOC analyst is examining the Windows security logs of one of the endpoints. What is the possible reason for this event log?
Question 64
What is the difference between a threat and a risk?
Question 65
Why should an engineer use a full packet capture to investigate a security breach?
