Question 1

What types of packets are sent to the victim of a session-hijacking attack to cause them to close their end of the connection

Options :

A : FIN or RST

B : SYN and ACK

C : SYN or ACK

D : FIN and ACK

Answer: A

Question 2

A network administrator working in an ABC organization collected log files generated by a traffic monitoring system, which may not seem to have useful information, but after performing proper analysis by him, the same information can be used to detect an attack in the network. Which of the following categories of threat information has he collected?

Options :

A : Advisories

B : Strategic reports

C : Detection indicators

D : Low-level data

Answer: C

Question 3

Identify the CTI lifecycle step involving sorting, organizing, and filtering for false and redundant information

Options :

A : Analysis

B :

Planning and Direction

C : Collection

D : Processing

Answer: D

Question 4

Which of the following behaviors does not help to identify adversary

Options :

A : DNS Tunneling

B :

None of these

C : Command line process execution, and the abuse of command line execution

D : Uncategorized Proxy Events

Answer: B

Question 5

What characterize APT

Options :

A : may require rewriting malicious code to avoid detection

B : uses sophisticated evasion techniques

C : All of these

D : maintain access to the targeted network without being discovered

Answer: C