600-199 試験問題を無料オンラインアクセス

Which describes the best method for preserving the chain of evidence?

• A.Identify the infected machine, disconnect from the network, and contact the local authorities.
• B.Allow user(s) to perform any business-critical tasks while waiting for local authorities.
• C.Shut down the machine that is infected, remove the hard drive, and contact the local authorities.
• D.Back up the hard drive, use antivirus software to clean the infected machine, and contact the local authorities.

Which two activities would you typically be expected to perform as a Network Security Analyst? (Choose two.)

• A.Create security policies on routers.
• B.Monitor database applications.
• C.Verify user login credentials.
• D.Troubleshoot firewall performance.

When investigating potential network security issues, which two pieces of useful information would be found in a syslog message? (Choose two.)

• A.IP address
• B.product serial number
• C.product model number
• D.MAC address
• E.broadcast address

A server administrator tells you that the server network is potentially under attack. Which piece of information is critical to begin your network investigation?

• A.administrator password for the servers
• B.IP addresses/subnets used for the servers
• C.cabinet location of the servers
• D.OS that is used on the servers

Which source should be used to recommend preventative measures against security vulnerabilities regardless of operating system or platform?

• A.Common Vulnerabilities and Exposure website
• B.Microsoft security bulletins
• C.Cisco PSIRT notices
• D.Mozilla Foundation security advisories
• E.zero-day attack wiki