[2023] 312-39 Actual Exam Dumps, 312-39 Practice Test [Q37-Q59]

Q37. An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company’s URL as follows:
http://technosoft.com.com/<script>alert(“WARNING: The application has encountered an error”);</script>.
Identify the attack demonstrated in the above scenario.

Q38. Which of the following is a Threat Intelligence Platform?

Q39. Which of the following contains the performance measures, and proper project and time management details?

Q40. Which of the following are the responsibilities of SIEM Agents?
1.Collecting data received from various devices sending data to SIEM before forwarding it to the central engine.
2.Normalizing data received from various devices sending data to SIEM before forwarding it to the central engine.
3.Co-relating data received from various devices sending data to SIEM before forwarding it to the central engine.
4.Visualizing data received from various devices sending data to SIEM before forwarding it to the central engine.

Q41. A type of threat intelligent that find out the information about the attacker by misleading them is known as
.

Q42. If the SIEM generates the following four alerts at the same time:
I.Firewall blocking traffic from getting into the network alerts
II.SQL injection attempt alerts
III.Data deletion attempt alerts
IV.Brute-force attempt alerts
Which alert should be given least priority as per effective alert triaging?

Q43. Which of the following command is used to view iptables logs on Ubuntu and Debian distributions?

Q44. Identify the HTTP status codes that represents the server error.

Q45. Which of the following stage executed after identifying the required event sources?

Q46. Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?

Q47. Which of the following is a default directory in a Mac OS X that stores security-related logs?

Q48. Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?

Q49. Which of the following formula is used to calculate the EPS of the organization?

Q50. Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

Q51. Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?

Q52. Which of the following command is used to enable logging in iptables?

Q53. Which attack works like a dictionary attack, but adds some numbers and symbols to the words from the dictionary and tries to crack the password?

Q54. Which of the following is a set of standard guidelines for ongoing development, enhancement, storage, dissemination and implementation of security standards for account data protection?

Q55. Which of the following security technology is used to attract and trap people who attempt unauthorized or illicit utilization of the host system?

Q56. Which of the log storage method arranges event logs in the form of a circular buffer?

Q57. InfoSystem LLC, a US-based company, is establishing an in-house SOC. John has been given the responsibility to finalize strategy, policies, and procedures for the SOC.
Identify the job role of John.

Q58. Which of the following attack can be eradicated by using a safe API to avoid the use of the interpreter entirely?

Q59. Which of the following process refers to the discarding of the packets at the routing level without informing the source that the data did not reach its intended recipient?