CySA 4

In what type of attack does the attacker place more information in a memory location than is allocated for that use?

Which one of the following organizations focuses on providing tools and advice for secure web application development?

Which option would be most useful to determine if traffic levels are not typical for this time of day in a normal week?

Which one of the following is an example of a computer security incident?

Which one of the following is not a common source of information that may be correlated with vulnerability scan results?

Bob is configuring scans for a system that is subject to the PCI DSS standard. What is the minimum frequency required?

During what phase of the IRP would an organization implement defenses designed to reduce the likelihood of an incident?

Which one of the CVSS metrics would have info about a type of access that an attacker must have to execute an attack?

Bob analyzed a vulnerability scan and found that a vulnerability reported did not exist due to recent patch?

Which one of the following elements is not normally found in an incident response policy?

What documentation is needed to create and maintain if the evidence is to be used in a legal case?

Bob wants to adopt an open IoC feed. What issue is Bob most likely to need to address when adopting it?

What type of system  can combine log records from multiple sources to detect potential security incidents?

What approach to vulnerability scanning incorporates information from agents running on the target servers?

What term describes an organization’s willingness to tolerate risk in their computing environment?

What phase of the Cyber Kill Chain includes creation of persistent backdoor access for attackers?

Which one of the following document types would outline the authority of a CSIRT responding to a security incident?

Which one of the following values for the CIA CVSS metric would indicate the potential for total compromise of a system?

What federal law requires the use of vulnerability scanning on info systems operated by federal government agencies?

Which one of the following protocols should never be used on a public network?