Which two elements of the incident response process are stated in NIST SP 800-61 r2? (Choose two.)
Correct Answer:
AB
The security team has detected an ongoing spam campaign targeting the organization. The team's approach is to push back the cyber kill chain and mitigate ongoing incidents. At which phase of the cyber kill chain should the security team mitigate this type of attack?
Correct Answer:
B
Refer to the exhibit.
What is depicted in the exhibit?
Correct Answer:
B
Refer to the exhibit.
Drag and drop the element name from the left onto the correct piece of the PCAP file on the right.
Solution:
Does this meet the goal?
Correct Answer:
A
An engineer needs to configure network systems to detect command and control communications by decrypting ingress and egress perimeter traffic and allowing network security devices to detect malicious outbound communications. Which technology should be used to accomplish the task?
Correct Answer:
A
