Question 576
A junior security analyst iss conducting an analysis after passwords were changed on multiple accounts without users' interaction. The SIEM have multiple logtn entnes with the following text:
Which of Ihe following is the MOST likely attack conducted on the environment?
Which of Ihe following is the MOST likely attack conducted on the environment?
Question 577
A client sent several inquiries to a project manager about the delinquent delivery status of some critical reports. The project manager claimed the reports were previously sent via email, but then quickly generated and backdated the reports before submitting them as plain text within the body of a new email message thread. Which of the following actions MOST likely supports an investigation for fraudulent submission?
Question 578
A company is implementing BYOD and wants to ensure all users have access to the same cloud- based services.
Which of the following would BEST allow the company to meet this requirement?
Which of the following would BEST allow the company to meet this requirement?
Question 579
A user reports constant lag and performance issues with the wireless network when working at a local coffee shop A security analyst walks the user through an installation of Wireshark and gets a five-minute pcap to analyze. The analyst observes the following output:
Which of the following attacks does the analyst most likely see in this packet capture?
Which of the following attacks does the analyst most likely see in this packet capture?
Question 580
A global company is experiencing unauthorized logging due to credential theft and account lockouts caused by brute-force attacks. The company is considering implementing a third-party identity provider to help mitigate these attacks. Which of the following would be the BEST control for the company to require from prospective vendors?