312-39 Practice Test

In which phase of Lockheed Martin's – Cyber Kill Chain Methodology, adversary creates a deliverable malicious payload using an exploit and a backdoor?

A.

Reconnaissance

B.

Delivery

C.

Weaponization

D.

Exploitation

Which of the following tool can be used to filter web requests associated with the SQL Injection attack?

A.

Nmap

B.

UrlScan

C.

ZAP proxy

D.

Hydra

Which of the following threat intelligence helps cyber security professionals such as
security operations managers, network operations center and incident responders to
understand how the adversaries are expected to perform the attack on the organization,
and the technical capabilities and goals of the attackers along with the attack vectors?

A.

Analytical Threat Intelligence

B.

Operational Threat Intelligence

C.

Strategic Threat Intelligence

D.

Tactical Threat Intelligence

Banter is a threat analyst in Christine Group of Industries. As a part of the job, he is currently formatting and structuring the raw data.
He is at which stage of the threat intelligence life cycle?

A.

Dissemination and Integration

B.

Processing and Exploitation

C.

Collection

D.

Analysis and Production

John, a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(\.|(%|%25)2E)(\.|(%|%25)2E)(\/|(%|%25)2F|\\|(%|%25)5C)/i.
What does this event log indicate?

A.

XSS Attack

B.

SQL injection Attack

C.

Directory Traversal Attack

D.

Parameter Tampering Attack