312-39

312-39 practice questions, page 4 of 4, with answer review and explanations.

Question 16

Juliea a SOC analyst, while monitoring logs, noticed large TXT, NULL payloads. What does this indicate?

  1. Concurrent VPN Connections Attempt
  2. DNS Exfiltration Attempt
  3. Covering Tracks Attempt
  4. DHCP Starvation Attempt

Question 17

An organization is implementing and deploying the SIEM with following capabilities. What kind of SIEM deployment architecture the organization is planning to implement?

  1. Cloud, MSSP Managed
  2. Self-hosted, Jointly Managed
  3. Self-hosted, Self-Managed
  4. Self-hosted, MSSP Managed

Question 18

What is the process of monitoring and capturing all data packets passing through a given network using different tools?

  1. Network Scanning
  2. DNS Footprinting
  3. Network Sniffing
  4. Port Scanning

Question 19

Which of the following is a report writing tool that will help incident handlers to generate efficient reports on detected incidents during incident response process?

  1. threat_note
  2. MagicTree
  3. IntelMQ
  4. Malstrom

Question 20

Which of the following Windows features is used to enable Security Auditing in Windows?

  1. Bitlocker
  2. Windows Firewall
  3. Local Group Policy Editor
  4. Windows Defender