Free Access EC-COUNCIL.312-39.v2022-04-06.q36 Practice Test (Page 6)

Question 21

Which of the following factors determine the choice of SIEM architecture?

A.DNS Configuration

B.DHCP Configuration

C.Network Topology

D.SMTP Configuration

Question 22

Emmanuel is working as a SOC analyst in a company named Tobey Tech. The manager of Tobey Tech recently recruited an Incident Response Team (IRT) for his company. In the process of collaboration with the IRT, Emmanuel just escalated an incident to the IRT.
What is the first step that the IRT will do to the incident escalated by Emmanuel?

A.Incident Recording

B.Incident Prioritization

C.Incident Classification

D.Incident Analysis and Validation

Question 23

John, SOC analyst wants to monitor the attempt of process creation activities from any of their Windows endpoints.
Which of following Splunk query will help him to fetch related logs associated with process creation?

A.index=windows LogName=Security EventCode=3688 NOT (Account_Name=*$) .. .. ..

B.index=windows LogName=Security EventCode=4678 NOT (Account_Name=*$) .. .. ... ..

C.index=windows LogName=Security EventCode=5688 NOT (Account_Name=*$) ... ... ...

D.index=windows LogName=Security EventCode=4688 NOT (Account_Name=*$) .. .. ..

Question 24

Which of the following command is used to enable logging in iptables?

A.$ iptables -B OUTPUT -j LOG

B.$ iptables -B INPUT -j LOG

C.$ iptables -A OUTPUT -j LOG

D.$ iptables -A INPUT -j LOG

Question 25

Harley is working as a SOC analyst with Powell Tech. Powell Inc. is using Internet Information Service (IIS) version 7.0 to host their website.
Where will Harley find the web server logs, if he wants to investigate them for any anomalies?

A.%SystemDrive%\LogFiles\logs\W3SVCN

B.SystemDrive%\LogFiles\inetpub\logs\W3SVCN

C.SystemDrive%\inetpub\logs\LogFiles\W3SVCN

D.SystemDrive%\ inetpub\LogFiles\logs\W3SVCN

Other Version: 621EC-COUNCIL.312-39.v2024-10-29.q79; 478EC-COUNCIL.312-39.v2024-06-15.q50; 714EC-COUNCIL.312-39.v2023-11-15.q52; 1077EC-COUNCIL.312-39.v2023-04-11.q50; 1224EC-COUNCIL.312-39.v2022-06-18.q34; 57EC-COUNCIL.Ipassleader.312-39.v2021-10-20.by.myron.34q.pdf

Latest Upload: 107EMC.D-VXR-DS-00.v2025-12-24.q43; 110Splunk.SPLK-5001.v2025-12-24.q37; 121Huawei.H19-308-ENU.v2025-12-24.q74; 106APMG-International.AgilePM-Foundation.v2025-12-24.q74; 134SAP.C-C4H62-2408.v2025-12-24.q81; 108ASHRAE.HFDP.v2025-12-24.q39; 113ISQI.CTFL-UT.v2025-12-23.q13; 123ARDMS.SPI.v2025-12-23.q102; 119Microsoft.SC-300.v2025-12-23.q333; 120PaloAltoNetworks.PSE-Prisma-Pro-24.v2025-12-23.q39

Question 21

Question 22

Question 23

Question 24

Question 25

Download PDF File