NEW QUESTION 47
Which of the following terms refers to vulnerable account management functions, including account update, recovery of forgotten or lost passwords, and password reset, that might weaken valid authentication schemes?

NEW QUESTION 48
Allan performed a reconnaissance attack on his corporate network as part of a red-team activity. He scanned the IP range to find live host IP addresses.
What type of technique did he use to exploit the network?

NEW QUESTION 49
EnviroTech, a global environmental research institute, faced anomalies in six months of satellite weather data. Unauthorized data modification entries were found in logs, occurring in microbursts with minimal traces. While the intent was unclear, the implications were significant. What’s the optimal response?

NEW QUESTION 50
Eve’s is an incident handler in ABC organization. One day, she got a complaint about email hacking incident from one of the employees of the organization. As a part of incident handling and response process, she must follow many recovery steps in order to recover from incident impact to maintain business continuity.
What is the first step that she must do to secure employee account?

NEW QUESTION 51
Business Continuity planning includes other plans such as:

NEW QUESTION 52
Rinni is an incident handler and she is performing memory dump analysis. Which of following tools she can use in order to perform memory dump analysis?

NEW QUESTION 53
A software application in which advertising banners are displayed while the program is running that delivers ads to display pop-up windows or bars that appears on a computer screen or browser is called:

NEW QUESTION 54
A ransomware attack recently disrupted operations at a manufacturing facility, specifically targeting its IoT- integrated conveyor system. While attempting to recover from the incident, the incident response team discovered that the available backups were incomplete-several critical sensor logs and control commands were missing, which caused delays in restoring device functions and syncing with other systems. The team concludes that relying on traditional backup routines alone is insufficient for restoring full IoT functionality after an attack. Which strategy would best prevent such issues in future recovery efforts?

NEW QUESTION 55
A company has migrated its infrastructure and services to the cloud to leverage its scalability and flexibility. However, they are facing challenges in effectively handling and responding to security incidents in the cloud environment. What is one of the key challenges in cloud incident handling and response?

NEW QUESTION 56
Patrick is performing a cyber forensic investigation. He is in the process of collect ng physical evidence at the crime scene.
Which of the following elements must he consider while collecting physical evidence?

NEW QUESTION 57
DeltaDynamics, a large-scale data analytics firm, found that one of its data scientists was sharing proprietary algorithms with external parties. The firm wishes to monitor its employees more closely without breaching privacy laws. What is the most effective measure it should consider?

NEW QUESTION 58
The IT security team of a multinational corporation identifies a breach in its BYOD policy, with several employees’ mobile devices infected with spyware through a malicious app. These devices had access to the corporate email system. What is the most immediate action the security team should take?

NEW QUESTION 59
What is the primary goal of the identification phase in the incident handling process?

NEW QUESTION 60
Which of the following digital evidence temporarily stored on a digital device that requires a constant power supply and is deleted if the power supply is interrupted?

NEW QUESTION 61
Which of the following is NOT an image integrity tool?

NEW QUESTION 62
In which of the following confidentiality attacks attackers try to lure users by posing themselves as authorized AP by beaconing the WLAN’s SSID?

NEW QUESTION 63
Which of the following details are included in the evidence bags?

NEW QUESTION 64
Darwin is an attacker residing within the organization and is performing network sniffing by running his system in promiscuous mode. He is capturing and viewing all the network packets transmitted within the organization. Edwin is an incident handler in the same organization.
In the above situation, which of the following Nmap commands Edwin must use to detect Darwin’s system that is running in promiscuous mode?