According to the September 2020 threat intelligence feeds a new malware called Egregor was introduced and used in many attacks. Distnbution of Egregor is pnmanly through a Cobalt Strike that has been installed on victim's workstations using RDP exploits Malware exfiltrates the victim's data to a command and control server. The data is used to force victims pay or lose it by publicly releasing it. Which type of attack is described?

1. A. malware attack
2. B. ransomware attack
3. C. whale-phishing
4. D. insider threat

Correct Answer: B

An engineer received an alert affecting the degraded performance of a critical server. Analysis showed a heavy CPU and memory load. What is the next step the engineer should take to investigate this resource usage?

1. A. Run "ps -d" to decrease the priority state of high load processes to avoid resource exhaustion.
2. B. Run "ps -u" to find out who executed additional processes that caused a high load on a server.
3. C. Run "ps -ef" to understand which processes are taking a high amount of resources.
4. D. Run "ps -m" to capture the existing state of daemons and map required processes to find the gap.

Correct Answer: C

Refer to the exhibit.

What must be interpreted from this packet capture?

1. A. IP address 192.168.88 12 is communicating with 192 168 88 149 with a source port 74 to destination port 49098 using TCP protocol
2. B. IP address 192.168.88.12 is communicating with 192 168 88 149 with a source port 49098 to destination port 80 using TCP protocol.
3. C. IP address 192.168.88.149 is communicating with 192.168 88.12 with a source port 80 to destination port 49098 using TCP protocol.
4. D. IP address 192.168.88.149 is communicating with 192.168.88.12 with a source port 49098 to destination port 80 using TCP protocol.

Correct Answer: B

Which information must an organization use to understand the threats currently targeting the organization?

1. A. threat intelligence
2. B. risk scores
3. C. vendor suggestions
4. D. vulnerability exposure

Correct Answer: A

Drag and drop the elements from the left into the correct order for incident handling on the right.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A