2024年最新の実際に出る無料EC-COUNCIL 312-39試験問題集と解答
312-39練習テストエンジンで今すぐ試そう102試験問題
EC-COUNCIL 312-39認定試験は、サイバーセキュリティの分野でキャリアを追求したい個人を対象としています。この認定試験は、個人が認定SOCアナリスト（CSA）になるために必要なスキルと知識を提供することに焦点を当てています。サイバーセキュリティの脅威や攻撃の数が増加する中、CSA認定プロフェッショナルの需要は過去数年間で指数関数的に増加しています。
質問 # 37
In which log collection mechanism, the system or application sends log records either on the local disk or over the network.
- A. pull-based
- B. push-based
- C. rule-based
- D. signature-based
正解：C
質問 # 38
Which of the following steps of incident handling and response process focus on limiting the scope and extent of an incident?
- A. Data Collection
- B. Identification
- C. Eradication
- D. Containment
正解：D
質問 # 39
An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company's URL as follows:
http://technosoft.com.com/<script>alert("WARNING: The application has encountered an error");</script>.
Identify the attack demonstrated in the above scenario.
- A. SQL Injection Attack
- B. Cross-site Scripting Attack
- C. Session Attack
- D. Denial-of-Service Attack
正解：C
質問 # 40
What is the correct sequence of SOC Workflow?
- A. Collect, Ingest, Document, Validate, Report, Respond
- B. Collect, Ingest, Validate, Document, Report, Respond
- C. Collect, Respond, Validate, Ingest, Report, Document
- D. Collect, Ingest, Validate, Report, Respond, Document
正解：D
解説：
質問 # 41
Jane, a security analyst, while analyzing IDS logs, detected an event matching Regex /((\%3C)|<)((\%69)|i|(\%
49))((\%6D)|m|(\%4D))((\%67)|g|(\%47))[^\n]+((\%3E)|>)/|.
What does this event log indicate?
- A. Parameter Tampering Attack
- B. Directory Traversal Attack
- C. SQL Injection Attack
- D. XSS Attack
正解：D
質問 # 42
Identify the password cracking attempt involving a precomputed dictionary of plaintext passwords and their corresponding hash values to crack the password.
- A. Syllable Attack
- B. Bruteforce Attack
- C. Dictionary Attack
- D. Rainbow Table Attack
正解：C
質問 # 43
Which of the following contains the performance measures, and proper project and time management details?
- A. Incident Response Process
- B. Incident Response Tactics
- C. Incident Response Policy
- D. Incident Response Procedures
正解：D
質問 # 44
Which of the following command is used to enable logging in iptables?
- A. $ iptables -B OUTPUT -j LOG
- B. $ iptables -A INPUT -j LOG
- C. $ iptables -A OUTPUT -j LOG
- D. $ iptables -B INPUT -j LOG
正解：B
解説：
質問 # 45
David is a SOC analyst in Karen Tech. One day an attack is initiated by the intruders but David was not able to find any suspicious events.
This type of incident is categorized into?
- A. True Positive Incidents
- B. True Negative Incidents
- C. False Negative Incidents
- D. False positive Incidents
正解：C
解説：
質問 # 46
Which of the following contains the performance measures, and proper project and time management details?
- A. Incident Response Process
- B. Incident Response Policy
- C. Incident Response Tactics
- D. Incident Response Procedures
正解：B
解説：
質問 # 47
John as a SOC analyst is worried about the amount of Tor traffic hitting the network. He wants to prepare a dashboard in the SIEM to get a graph to identify the locations from where the TOR traffic is coming.
Which of the following data source will he use to prepare the dashboard?
- A. DNS/ Web Server logs with IP addresses.
- B. Apache/ Web Server logs with IP addresses and Host Name.
- C. IIS/Web Server logs with IP addresses and user agent IPtouseragent resolution.
- D. DHCP/Logs capable of maintaining IP addresses or hostnames with IPtoName resolution.
正解：D
解説：
質問 # 48
Which of the following data source can be used to detect the traffic associated with Bad Bot User-Agents?
- A. Router Logs
- B. Switch Logs
- C. Windows Event Log
- D. Web Server Logs
正解：D
質問 # 49
Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?
- A. /etc/ossim/siem/server/reputation/data
- B. /etc/ossim/reputation
- C. /etc/siem/ossim/server/reputation.data
- D. /etc/ossim/server/reputation.data
正解：B
質問 # 50
Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks.
What among the following should Wesley avoid from considering?
- A. Validate untrusted input, which is to be serialized to ensure that serialized data contain only trusted classes
- B. Understand the security permissions given to serialization and deserialization
- C. Deserialization of trusted data must cross a trust boundary
- D. Allow serialization for security-sensitive classes
正解：D
質問 # 51
Which of the following tool is used to recover from web application incident?
- A. Symantec Secure Web Gateway
- B. CrowdStrike FalconTM Orchestrator
- C. Proxy Workbench
- D. Smoothwall SWG
正解：A
質問 # 52
Which of the following Windows event is logged every time when a user tries to access the "Registry" key?
- A. 0
- B. 1
- C. 2
- D. 3
正解：B
解説：
質問 # 53
......
試験合格保証付きのEC-COUNCIL CSA 312-39試験問題集：https://www.jpntest.com/shiken/312-39-mondaishu
EC-COUNCIL 312-39日常練習試験は2024年最新のに更新された102問あります：https://drive.google.com/open?id=1Uf0dSjOYZSGwP23s2nJfS9HKbm9Nm3m1