Question 6
A security analyst is trying to determine if a host is active on a network. The analyst first attempts the following:

The analyst runs the following command next:

Which of the following would explain the difference in results?

The analyst runs the following command next:

Which of the following would explain the difference in results?
Question 7
Given the following output from a Linux machine:
file2cable *i eth0 -f file.pcap
Which of the following BEST describes what a security analyst is trying to accomplish?
file2cable *i eth0 -f file.pcap
Which of the following BEST describes what a security analyst is trying to accomplish?
Question 8
An organization is moving its infrastructure to the cloud in an effort to meet the budget and reduce staffing requirements. The organization has three environments: development, testing, and production. These environments have interdependencies but must remain relatively segmented.
Which of the following methods would BEST secure the company's infrastructure and be the simplest to manage and maintain?
Which of the following methods would BEST secure the company's infrastructure and be the simplest to manage and maintain?
Question 9
During an incident, a cybersecurity analyst found several entries in the web server logs that are related to an IP with a bad reputation . Which of the following would cause the analyst to further review the incident?
A)

B)

C)

D)

E)

A)

B)

C)

D)

E)

Question 10
A team of security analysis has been alerted to potential malware activity. The initial examination indicates one of the affected workstations on beaconing on TCP port 80 to five IP addresses and attempting to spread across the network over port 445. Which of the following should be the team's NEXT step during the detection phase of this response process?
