最新的Cisco Performing CyberOps Using Cisco Security Technologies - 350-201免費考試真題
An engineer notices that unauthorized software was installed on the network and discovers that it was installed by a dormant user account. The engineer suspects an escalation of privilege attack and responds to the incident. Drag and drop the activities from the left into the order for the response on the right.
正確答案:
What do 2xx HTTP response codes indicate for REST APIs?
正確答案: A
說明：（僅 Fast2test 成員可見）
A malware outbreak is detected by the SIEM and is confirmed as a true positive. The incident response team follows the playbook to mitigate the threat. What is the first action for the incident response team?
正確答案: B
說明：（僅 Fast2test 成員可見）
A payroll administrator noticed unexpected changes within a piece of software and reported the incident to the incident response team. Which actions should be taken at this step in the incident response workflow?
正確答案: A
說明：（僅 Fast2test 成員可見）
A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company's infrastructure. Which steps should an engineer take at the recovery stage?
正確答案: A
說明：（僅 Fast2test 成員可見）
An engineer detects an intrusion event inside an organization's network and becomes aware that files that contain personal data have been accessed. Which action must be taken to contain this attack?
正確答案: D
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?
An engineer is performing a static analysis on a malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compromise?
正確答案: D
說明：（僅 Fast2test 成員可見）