Win IT Exam with Last Dumps 2025

Which type of evidence supports a theory or an assumption that results from initial evidence?

A. probabilistic B. indirect C. best D. corroborative

Which two elements are assets in the role of attribution in an investigation? (Choose two.)

A. context B. session C. laptop D. firewall logs E. threat actor

What is personally identifiable information that must be safeguarded from unauthorized access?

A. date of birth B. driver's license number C. gender D. zip code

In a SOC environment, what is a vulnerability management metric?

A. code signing enforcement B. full assets scan C. internet exposed devices D. single factor authentication

A security expert is working on a copy of the evidence, an ISO file that is saved in CDFS format. Which type of evidence is this file?

A. CD data copy prepared in Windows B. CD data copy prepared in Mac-based system C. CD data copy prepared in Linux system D. CD data copy prepared in Android-based system

Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)

A. detection and analysis B. post-incident activity C. vulnerability management D. risk assessment E. vulnerability scoring

DRAG DROP -Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.
Select and Place:

Refer to the exhibit. What does this output indicate?

A. HTTPS ports are open on the server. B. SMB ports are closed on the server. C. FTP ports are open on the server. D. Email ports are closed on the server.

DRAG DROP -Drag and drop the elements from the left into the correct order for incident handling on the right.
Select and Place:

Which metric should be used when evaluating the effectiveness and scope of a Security Operations Center?

A. The average time the SOC takes to register and assign the incident. B. The total incident escalations per week. C. The average time the SOC takes to detect and resolve the incident. D. The total incident escalations per month.