312-39 무료 덤프문제 온라인 액세스

Which attack works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?

• A.Rainbow Table Attack
• B.Hybrid Attack
• C.Bruteforce Attack
• D.Birthday Attack

InfoSystem LLC, a US-based company, is establishing an in-house SOC. John has been given the responsibility to finalize strategy, policies, and procedures for the SOC.
Identify the job role of John.

• A.Security Engineer
• B.Security Analyst - L1
• C.Chief Information Security Officer (CISO)
• D.Security Analyst - L2

A mid-sized financial institution's SOC is overwhelmed by thousands of daily alerts, many based on Indicators of Compromise (IoCs) such as suspicious IPs, hashes, and domains. These alerts lack context about whether they truly pose a threat. Analysts waste time on low-priority incidents while severe threats may be missed. The team lacks tools and intelligence to correlate IoCs with real-world threats, making prioritization difficult and causing alert fatigue. Which poses the greatest challenge in this environment?

• A.Malware-centric and CTI are not equivalent
• B.Distinguishing IoC from CTI
• C.Information overload
• D.Budget and enterprise skill

Jane, a security analyst, while analyzing IDS logs, detected an event matching Regex /((\%3C)|<)((\%69)|i|(\%
49))((\%6D)|m|(\%4D))((\%67)|g|(\%47))[^\n]+((\%3E)|>)/|.
What does this event log indicate?

• A.Directory Traversal Attack
• B.XSS Attack
• C.Parameter Tampering Attack
• D.SQL Injection Attack

Which of the following threat intelligence is used by a SIEM for supplying the analysts with context and
"situational awareness" by using threat actor TTPs, malwarecampaigns, tools used by threat actors.
1.Strategic threat intelligence
2.Tactical threat intelligence
3.Operational threat intelligence
4.Technical threat intelligence

• A.1 and 2
• B.2 and 3
• C.3 and 4
• D.1 and 3