CCFH-202 무료 덤프문제 온라인 액세스

You would like to search for ANY process execution that used a file stored in the Recycle Bin on a Windows host. Select the option to complete the following EAM query.

• A.*$Recycle Bin*
• B.^$Recycle Bin*
• C.*$Recycle Bin^
• D.^$Recycle.Bin%^

Refer to Exhibit.

What type of attack would this process tree indicate?

• A.Phishing Attack
• B.Web Application Attack
• C.Man-in-the-middle Attack
• D.Brute Forcing Attack

In the Powershell Hunt report, what does the "score" signify?

• A.A cumulative score of the various potential command line switches
• B.Maliciousness score determined by NGAV
• C.How recently the PowerShell script executed
• D.Number of hosts that ran the PowerShell script

Which of the following queries will return the parent processes responsible for launching badprogram exe?

• A.event_simpleName=processrollup2 [search event_simpleName=processrollup2 FileName=badprogram.exe | rename ParentProcessld_decimal AS TargetProcessld_decimal | fields aid TargetProcessld_decimal] | stats count by FileName _time
• B.event_simpleName=processrollup2 [search event_simpleName=processrollup2 FileName=badprogram.exe | rename TargetProcessld_decimal AS ParentProcessld_decimal | fields aid TargetProcessld_decimal] | stats count by FileName _time
• C.[search (ProcessList) where Name=badprogram.exe ] | search ParentProcessName | table ParentProcessName _time
• D.[search (ParentProcess) where name=badprogranrexe ] | table ParentProcessName _time

Which tool allows a threat hunter to populate and colorize all known adversary techniques in a single view?

• A.MISP
• B.OWASP Threat Dragon
• C.OpenXDR
• D.MITRE ATT&CK Navigator