Authentic EC-COUNCIL 312-39 Exam Dumps PDF - Mar-2024 Updated
312-39 Dumps Special Discount for limited time Try FOR FREE
NEW QUESTION # 59
In which phase of Lockheed Martin's - Cyber Kill Chain Methodology, adversary creates a deliverable malicious payload using an exploit and a backdoor?
- A. Exploitation
- B. Delivery
- C. Reconnaissance
- D. Weaponization
Answer: B
NEW QUESTION # 60
Which of the following attacks causes sudden changes in file extensions or increase in file renames at rapid speed?
- A. File Injection Attack
- B. Ransomware Attack
- C. DoS Attack
- D. DHCP starvation Attack
Answer: B
NEW QUESTION # 61
Which of the following fields in Windows logs defines the type of event occurred, such as Correlation Hint, Response Time, SQM, WDI Context, and so on?
- A. Keywords
- B. Source
- C. Level
- D. Task Category
Answer: A
NEW QUESTION # 62
Which of the following tool can be used to filter web requests associated with the SQL Injection attack?
- A. Hydra
- B. Nmap
- C. ZAP proxy
- D. UrlScan
Answer: D
NEW QUESTION # 63
According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?
- A. High
- B. Medium
- C. Low
- D. Extreme
Answer: B
Explanation:
Explanation
Graphical user interface, application, Teams Description automatically generated
NEW QUESTION # 64
What is the correct sequence of SOC Workflow?
- A. Collect, Ingest, Validate, Report, Respond, Document
- B. Collect, Respond, Validate, Ingest, Report, Document
- C. Collect, Ingest, Document, Validate, Report, Respond
- D. Collect, Ingest, Validate, Document, Report, Respond
Answer: A
Explanation:
NEW QUESTION # 65
Which of the following formula is used to calculate the EPS of the organization?
- A. EPS = average number of correlated events / time in seconds
- B. EPS = number of security events / time in seconds
- C. EPS = number of normalized events / time in seconds
- D. EPS = number of correlated events / time in seconds
Answer: B
Explanation:
NEW QUESTION # 66
A type of threat intelligent that find out the information about the attacker by misleading them is known as
.
- A. Threat trending Intelligence
- B. Operational Intelligence
- C. Detection Threat Intelligence
- D. Counter Intelligence
Answer: B
NEW QUESTION # 67
Sam, a security analyst with INFOSOL INC., while monitoring and analyzing IIS logs, detected an event matching regex /\\w*((\%27)|(\'))((\%6F)|o|(\%4F))((\%72)|r|(\%52))/ix.
What does this event log indicate?
- A. Parameter Tampering Attack
- B. XSS Attack
- C. SQL Injection Attack
- D. Directory Traversal Attack
Answer: C
NEW QUESTION # 68
John as a SOC analyst is worried about the amount of Tor traffic hitting the network. He wants to prepare a dashboard in the SIEM to get a graph to identify the locations from where the TOR traffic is coming.
Which of the following data source will he use to prepare the dashboard?
- A. DHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution.
- B. IIS/Web Server logs with IP addresses and user agent IPtouseragent resolution.
- C. DNS/ Web Server logs with IP addresses.
- D. Apache/ Web Server logs with IP addresses and Host Name.
Answer: A
Explanation:
NEW QUESTION # 69
Which of the following steps of incident handling and response process focus on limiting the scope and extent of an incident?
- A. Eradication
- B. Containment
- C. Data Collection
- D. Identification
Answer: B
NEW QUESTION # 70
Which of the following framework describes the essential characteristics of an organization's security engineering process that must exist to ensure good security engineering?
- A. SSE-CMM
- B. ITIL
- C. SOC-CMM
- D. COBIT
Answer: A
NEW QUESTION # 71
Mike is an incident handler for PNP Infosystems Inc. One day, there was a ticket raised regarding a critical incident and Mike was assigned to handle the incident. During the process of incident handling, at one stage, he has performed incident analysis and validation to check whether the incident is a true incident or a false positive.
Identify the stage in which he is currently in.
- A. Incident Recording and Assignment
- B. Post-Incident Activities
- C. Incident Disclosure
- D. Incident Triage
Answer: D
Explanation:
NEW QUESTION # 72
John, a threat analyst at GreenTech Solutions, wants to gather information about specific threats against the organization. He started collecting information from various sources, such as humans, social media, chat room, and so on, and created a report that contains malicious activity.
Which of the following types of threat intelligence did he use?
- A. Strategic Threat Intelligence
- B. Operational Threat Intelligence
- C. Tactical Threat Intelligence
- D. Technical Threat Intelligence
Answer: B
NEW QUESTION # 73
Which of the following tool is used to recover from web application incident?
- A. Smoothwall SWG
- B. CrowdStrike FalconTM Orchestrator
- C. Proxy Workbench
- D. Symantec Secure Web Gateway
Answer: B
Explanation:
NEW QUESTION # 74
Juliea a SOC analyst, while monitoring logs, noticed large TXT, NULL payloads.
What does this indicate?
- A. Concurrent VPN Connections Attempt
- B. DNS Exfiltration Attempt
- C. Covering Tracks Attempt
- D. DHCP Starvation Attempt
Answer: B
NEW QUESTION # 75
An attacker exploits the logic validation mechanisms of an e-commerce website. He successfully purchases a product worth $100 for $10 by modifying the URL exchanged between the client and the server.
Original
URL: http://www.buyonline.com/product.aspx?profile=12
&debit=100
Modified URL: http://www.buyonline.com/product.aspx?profile=12
&debit=10
Identify the attack depicted in the above scenario.
- A. Denial-of-Service Attack
- B. Session Fixation Attack
- C. Parameter Tampering Attack
- D. SQL Injection Attack
Answer: C
Explanation:
NEW QUESTION # 76
Which of the following formula is used to calculate the EPS of the organization?
- A. EPS = average number of correlated events / time in seconds
- B. EPS = number of normalized events / time in seconds
- C. EPS = number of correlated events / time in seconds
- D. EPS = number of security events / time in seconds
Answer: A
NEW QUESTION # 77
......
312-39 Dumps for success in Actual Exam: https://www.exam4pdf.com/312-39-dumps-torrent.html
Realistic 312-39 100% Pass Guaranteed Download Exam Q&A: https://drive.google.com/open?id=1VkWLg0YaiaALac6cIYm7QTBYCJTaqISn
