Question 1

Jame, a professional hacker, is trying to hack the confidential information of a target organization. He identified the vulnerabilities in the target system and created a tailored deliverable malicious payload using an exploit and a backdoor to send it to the victim. Which of the following phases of cyber kill chain methodology is Jame executing?

Options :

A : Reconnaissance

B : Installation

C : Weaponization

D : Exploitation

Answer: C

Question 2

What is the last step of Cyber Kill Chain

Options :

A : Lateral Movement

B : Data Collection

C : Privilege Escalation

D :

Data Exfiltration

Answer: D

Question 3

How intelligence improve patching priorities

Options :

A : infrastructure groups spend less time on vulnerabilities that are low priority or irrelevant to their organization

B : All of these

C :

infrastructure groups can close the window on immediate threats faster

Answer: B

Question 4

The information stored in a Central Knowledge Base should include

Options :

A : investigative reports about attacks observed in the enterprise

B : threat indicators

C : malware and attack analysis reports

D : All of these

Answer: D

Question 5

Triage for SIEM alerts by SOC analysts can be categorized as

Options :

A :

All of these

B : Ignore

C : Escalate immediately to the incident response (IR) team

D : Investigate when time permits

Answer: A

Free 312-85 Mock Exam – Practice Online Confidently

Buying Options: