350-201 試験問題を無料オンラインアクセス

Drag and drop the mitigation steps from the left onto the vulnerabilities they mitigate on the right.

正解：

Refer to the exhibit.

A security analyst needs to investigate a security incident involving several suspicious connections with a possible attacker. Which tool should the analyst use to identify the source IP of the offender?

• A.malware analysis
• B.SIEM
• C.firewall manager
• D.packet sniffer

Employees report computer system crashes within the same week. An analyst is investigating one of the computers that crashed and discovers multiple shortcuts in the system's startup folder. It appears that the shortcuts redirect users to malicious URLs. What is the next step the engineer should take to investigate this case?

• A.Identify affected systems
• B.Remove the shortcut files
• C.Check the audit logs
• D.Investigate the malicious URLs

An API developer is improving an application code to prevent DDoS attacks. The solution needs to accommodate instances of a large number of API requests coming for legitimate purposes from trustworthy services. Which solution should be implemented?

• A.Increase a limit of replies in a given interval for each API. If the limit is exceeded, block access from the API key permanently and return a 450 HTTP error code.
• B.Restrict the number of requests based on a calculation of daily averages. If the limit is exceeded, temporarily block access from the IP address and return a 402 HTTP error code.
• C.Apply a limit to the number of requests in a given time interval for each API. If the rate is exceeded, block access from the API key temporarily and return a 429 HTTP error code.
• D.Implement REST API Security Essentials solution to automatically mitigate limit exhaustion. If the limit is exceeded, temporarily block access from the service and return a 409 HTTP error code.

Refer to the exhibit.

Which asset has the highest risk value?

• A.website
• B.servers
• C.secretary workstation
• D.payment process