Question 1

What is the function of a disassembler?

Options :

A : aids performing static malware analysis

B : aids viewing and changing the running state

C : aids transforming symbolic language into machine code

D : aids defining breakpoints in program execution

Answer: A

Question 2

Refer to the exhibit. What do these artifacts indicate?

Options :

A : An executable file is requesting an application download

B : A malicious file is redirecting users to different domains.

C : The MD5 of a file is identified as a virus and is being blocked.

D : A forged DNS request is forwarding users to malicious websites.

Answer: A

Question 3

Which scripts will search a log file for the IP address of 192.168.100.100 and create an output file named parsed_host.log while printing results to the console?

Options :

A :

B :

C :

D :

Answer: A

Question 4

Refer to the exhibit. Which element in this email is an indicator of attack?

Options :

A : IP Address: 202.142.155.218

B : content-Type: multipart/mixed

C : attachment: “Card-Refund”

D : subject: “Service Credit Card”

Answer: C

Question 5

damage. Leadership requested a report that identifies the problems that triggered the incident and the

security team’s approach to address these problems to prevent a reoccurrence. Which components of the

incident should an engineer analyze first for this report?

Options :

A : impact and flow

B : cause and effect

C : risk and RPN

D : motive and factors

Answer: D