300-215

300-215 practice questions, page 3 of 5, with answer review and explanations.

Question 11

An investigator is analyzing an attack in which malicious files were loaded on the network and were undetected. Several of the images received during the attack include repetitive patterns. Which anti-forensic technique was used?

  1. spoofing
  2. obfuscation
  3. tunneling
  4. steganography

Question 12

A security team detected an above-average amount of inbound tcp/135 connection attempts from unidentified senders. The security team is responding based on their incident response playbook. Which two elements are part of the eradication phase for this incident? (Choose two.)

  1. anti-malware software
  2. data and workload isolation
  3. centralized user management
  4. intrusion prevention system
  5. enterprise block listing solution

Question 13

Which tool conducts memory analysis?

  1. MemDump
  2. Sysinternals Autoruns
  3. Volatility
  4. Memoryze

Question 14

Refer to the exhibit. What is the IOC threat and URL in this STIX JSON snippet?

  1. malware; "˜http://x4z9arb.cn/4712/'
  2. malware; x4z9arb backdoor
  3. x4z9arb backdoor; http://x4z9arb.cn/4712/
  4. malware; malware--162d917e-766f-4611-b5d6-652791454fca
  5. stix; "˜http://x4z9arb.cn/4712/'

Question 15

Refer to the exhibit. Which type of code is being used?

  1. Shell
  2. VBScript
  3. BASH
  4. Python