300-215

300-215 practice questions, page 4 of 5, with answer review and explanations.

Question 16

What is the function of a disassembler?

  1. aids performing static malware analysis
  2. aids viewing and changing the running state
  3. aids transforming symbolic language into machine code
  4. aids defining breakpoints in program execution

Question 17

An "unknown error code" is appearing on an ESXi host during authentication. An engineer checks the authentication logs but is unable to identify the issue. Analysis of the vCenter agent logs shows no connectivity errors. What is the next log file the engineer should check to continue troubleshooting this error?

  1. /var/log/syslog.log
  2. /var/log/vmksummary.log
  3. var/log/shell.log
  4. var/log/general/log

Question 18

Over the last year, an organization's HR department has accessed data from its legal department on the last day of each month to create a monthly activity report. An engineer is analyzing suspicious activity alerted by a threat intelligence platform that an authorized user in the HR department has accessed legal data daily for the last week. The engineer pulled the network data from the legal department's shared folders and discovered above average-size data dumps. Which threat actor is implied from these artifacts?

  1. privilege escalation
  2. internal user errors
  3. malicious insider
  4. external exfiltration

Question 19

A website administrator has an output of an FTP session that runs nightly to download and unzip files to a local staging server. The download includes thousands of files, and the manual process used to find how many files failed to download is time-consuming. The administrator is working on a PowerShell script that will parse a log file and summarize how many files were successfully downloaded versus ones that failed. Which script will read the contents of the file one line at a time and return a collection of objects?

  1. Get-Content-Folder \\Server\FTPFolder\Logfiles\ftpfiles.log | Show-From "ERROR", "SUCCESS"
  2. Get-Content ""ifmatch \\Server\FTPFolder\Logfiles\ftpfiles.log | Copy-Marked "ERROR", "SUCCESS"
  3. Get-Content ""Directory \\Server\FTPFolder\Logfiles\ftpfiles.log | Export-Result "ERROR", "SUCCESS"
  4. Get-Content ""Path \\Server\FTPFolder\Logfiles\ftpfiles.log | Select-String "ERROR", "SUCCESS"

Question 20

Refer to the exhibit. An engineer is analyzing a TCP stream in a Wireshark after a suspicious email with a URL. What should be determined about the SMB traffic from this stream?

  1. It is redirecting to a malicious phishing website,
  2. It is exploiting redirect vulnerability
  3. It is requesting authentication on the user site.
  4. It is sharing access to files and printers.