[2023年最新] 最高の試験312-39問題集は無料サイトの資料を試そう [Q25-Q41]

質問 25
Which of the following tool can be used to filter web requests associated with the SQL Injection attack?

質問 26
If the SIEM generates the following four alerts at the same time:
I.Firewall blocking traffic from getting into the network alerts
II.SQL injection attempt alerts
III.Data deletion attempt alerts
IV.Brute-force attempt alerts
Which alert should be given least priority as per effective alert triaging?

質問 27
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.
Identify the stage in which he is currently in.

質問 28
What does HTTPS Status code 403 represents?

質問 29
Which of the following is a default directory in a Mac OS X that stores security-related logs?

質問 30
Which of the following attack can be eradicated by converting all non-alphanumeric characters to HTML character entities before displaying the user input in search engines and forums?

質問 31
Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?

質問 32
Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?

質問 33
Which of the log storage method arranges event logs in the form of a circular buffer?

質問 34
Which of the following is a set of standard guidelines for ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection?

質問 35
Sam, a security analyst with INFOSOL INC., while monitoring and analyzing IIS logs, detected an event matching regex /\w*((%27)|(‘))((%6F)|o|(%4F))((%72)|r|(%52))/ix.
What does this event log indicate?

質問 36
What is the process of monitoring and capturing all data packets passing through a given network using different tools?

質問 37
According to the Risk Matrix table, what will be the risk level when the probability of an attack is very high, and the impact of that attack is major?
NOTE: It is mandatory to answer the question before proceeding to the next one.

質問 38
Which of the following are the responsibilities of SIEM Agents?
1.Collecting data received from various devices sending data to SIEM before forwarding it to the central engine.
2.Normalizing data received from various devices sending data to SIEM before forwarding it to the central engine.
3.Co-relating data received from various devices sending data to SIEM before forwarding it to the central engine.
4.Visualizing data received from various devices sending data to SIEM before forwarding it to the central engine.

質問 39
What is the correct sequence of SOC Workflow?

質問 40
According to the forensics investigation process, what is the next step carried out right after collecting the evidence?

質問 41
Which one of the following is the correct flow for Setting Up a Computer Forensics Lab?