312-39

312-39 practice questions, page 3 of 4, with answer review and explanations.

Question 11

Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?

  1. /etc/ossim/reputation
  2. /etc/ossim/siem/server/reputation/data
  3. /etc/siem/ossim/server/reputation.data
  4. /etc/ossim/server/reputation.data

Question 12

According to the Risk Matrix table, what will be the risk level when the probability of an attack is very low and the impact of that attack is major?

  1. High
  2. Extreme
  3. Low
  4. Medium

Question 13

Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

  1. $ tailf /var/log/sys/kern.log
  2. $ tailf /var/log/kern.log
  3. # tailf /var/log/messages
  4. # tailf /var/log/sys/messages

Question 14

Which of the following technique involves scanning the headers of IP packets leaving a network to make sure that the unauthorized or malicious traffic never leaves the internal network?

  1. Egress Filtering
  2. Throttling
  3. Rate Limiting
  4. Ingress Filtering

Question 15

Which of the following formula is used to calculate the EPS of the organization?

  1. EPS = average number of correlated events / time in seconds
  2. EPS = number of normalized events / time in seconds
  3. EPS = number of security events / time in seconds
  4. EPS = number of correlated events / time in seconds