Question 451

Ann. An employee in the payroll department, has contacted the help desk citing multiple issues with her device, including:
Ann states the issues began after she opened an invoice that a vendor emailed to her.
Upon opening the invoice, she had to click several security warnings to view it in her word processor. With which of the following is the device MOST likely infected?
  • Question 452

    A security analyst reviews the following output:

    The analyst loads the hash into the SIEM to discover if this hash is seen in other parts of the network. After inspecting a large number of files, the security analyst reports the following:

    Which of the following is the MOST likely cause of the hash being found in other areas?
  • Question 453

    A technician suspects that a system has been compromised. The technician reviews the following log entry:
    WARNING - hash mismatch: C:\Window\SysWOW64\user32.dll

    WARNING - hash mismatch: C:\Window\SysWOW64\kernel32.dll

    Based solely on the above information, which of the following types of malware is MOST likely installed on the system?
  • Question 454

    A member of the human resources department is searching for candidate resumes and encounters the following error message when attempting to access popular job search websites:

    Which of the following would resolve this issue without compromising the company's security policies?
  • Question 455

    A security administrator has found a hash in the environment known to belong to malware. The administrator then finds this file to be in in the preupdate area of the OS, which indicates it was pushed from the central patch system.
    File: winx86_adobe_flash_upgrade.exe
    Hash: 99ac28bede43ab869b853ba62c4ea243
    The administrator pulls a report from the patch management system with the following output:

    Given the above outputs, which of the following MOST likely happened?