最新的EC-COUNCIL Certified SOC Analyst (CSA) - 312-39免費考試真題
Which of the following attacks causes sudden changes in file extensions or increase in file renames at rapid speed?
正確答案: C
說明：（僅 Fast2test 成員可見）
A leading e-commerce company relies on backend servers for processing customer transactions. You are working with their cybersecurity team as a SOC analyst. One morning, you notice a sharp increase in CPU utilization on one of your backend servers. Your team scans and monitors the server and finds that an unknown process is running, consuming excessive resources. You further perform detailed forensic analysis and identify the presence of an unrecognized scheduled task that triggers a PowerShell script connecting to an unknown IP address. What should you do to confirm whether this is an active attack?
正確答案: A
說明：（僅 Fast2test 成員可見）
Chloe, a SOC analyst with Jake Tech, is checking Linux systems logs. She is investigating files at /var/log/ wtmp.
What Chloe is looking at?
What Chloe is looking at?
正確答案: C
說明：（僅 Fast2test 成員可見）
SecureTech Inc. operates critical infrastructure and applications in AWS. The SOC detects suspicious activities such as unexpected API calls, unusual outbound traffic from instances, and DNS requests to potentially malicious domains. They need a fully managed AWS security service that continuously monitors for malicious activity, analyzes CloudTrail logs, VPC Flow Logs, and DNS query logs, leverages machine learning and threat intelligence, and provides actionable findings. Which AWS service best fits?
正確答案: C
說明：（僅 Fast2test 成員可見）
A SOC team is implementing a threat intelligence strategy to proactively defend against threats. The CISO emphasizes that collecting data is not enough; the team must allocate personnel, tools, and time to gather intelligence aligned with key concerns (fraud, phishing, nation-state threats). They must determine who will collect intelligence, which sources will be monitored, and how frequently collection occurs. What is this process called?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which of the following is a correct flow of the stages in an incident handling and response (IH&R) process?
正確答案: C
說明：（僅 Fast2test 成員可見）
Ray is a SOC analyst in a company named Queens Tech. One Day, Queens Tech is affected by a DoS/DDoS attack. For the containment of this incident, Ray and his team are trying to provide additional bandwidth to the network devices and increasing the capacity of the servers.
What is Ray and his team doing?
What is Ray and his team doing?
正確答案: B
說明：（僅 Fast2test 成員可見）
Which of the following fields in Windows logs defines the type of event occurred, such as Correlation Hint, Response Time, SQM, WDI Context, and so on?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which of the following is a Threat Intelligence Platform?
正確答案: A
說明：（僅 Fast2test 成員可見）