Question 61

An organization is using Risk-Based Alerting (RBA). During the past few days, a user account generated multiple risk observations. Splunk refers to this account as what type of entity?
  • Question 62

    Which of the following is a tactic used by attackers, rather than a technique?
  • Question 63

    The following list contains examples of Tactics, Techniques, and Procedures (TTPs):
    * Exploiting a remote service
    * Extend movement
    * Use EternalBlue to exploit a remote SMB server
    In which order are they listed below?