312-39 Practice Exam Questions and Answers

An attacker exploits the logic validation mechanisms of an e-commerce website. He successfully purchases a product worth $100 for $10 by modifying the URL exchanged between the client and the server.

Original URL: http://www.buyonline.com/product.aspx?profile=12 &debit=100 Modified URL: http://www.buyonline.com/product.aspx?profile=12 &debit=10

Identify the attack depicted in the above scenario.

The Syslog message severity levels are labelled from level 0 to level 7.

What does level 0 indicate?

Which of the following event detection techniques uses User and Entity Behavior Analytics (UEBA)?

What does the HTTP status codes 1XX represents?

Identify the event severity level in Windows logs for the events that are not necessarily significant, but may indicate a possible future problem.

Which attack works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?

InfoSystem LLC, a US-based company, is establishing an in-house SO

C.  

C.  

Identify the job role of John.

Which of the following are the responsibilities of SIEM Agents?

1.Collecting data received from various devices sending data to SIEM before forwarding it to the central engine.

2.Normalizing data received from various devices sending data to SIEM before forwarding it to the central engine.

3.Co-relating data received from various devices sending data to SIEM before forwarding it to the central engine.

4.Visualizing data received from various devices sending data to SIEM before forwarding it to the central engine.

Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

In which of the following incident handling and response stages, the root cause of the incident must be found from the forensic results?