Question 31

Drag and drop the threat from the left onto the scenario that introduces the threat on the right. Not all options are used.

Question 32

Engineers are working to document, list, and discover all used applications within an organization. During the regular assessment of applications from the HR backup server, an engineer discovered an unknown application. The analysis showed that the application is communicating with external addresses on a non- secure, unencrypted channel. Information gathering revealed that the unknown application does not have an owner and is not being used by a business unit. What are the next two steps the engineers should take in this investigation? (Choose two.)
  • Question 33

    An engineer receives a report that indicates a possible incident of a malicious insider sending company information to outside parties. What is the first action the engineer must take to determine whether an incident has occurred?
  • Question 34

    Refer to the exhibit.

    Which asset has the highest risk value?
  • Question 35

    An engineer is analyzing a possible compromise that happened a week ago when the company ? (Choose two.)