GEIR 試験問題を無料オンラインアクセス

Which outcome is a direct benefit of conducting regular post-incident reviews in an enterprise incident response program?
Response:

• A.Enhanced preparedness for future incidents through lessons learned
• B.Direct financial recovery from the incident
• C.Immediate identification of the attacker
• D.Increased marketing opportunities

Which of the following are essential tools for malware analysis on macOS?
(Choose Two)
Response:

• A.Finder
• B.Terminal
• C.Activity Monitor
• D.Keychain Access

How do you view connected USB devices on a macOS system?
Response:

• A.Use the command system_profiler SPUSBDataType
• B.Use the command listusb -a
• C.Use the command connect_usb
• D.Use the command usb_show

What is the first step in a digital forensic and incident response (DFIR) strategy for a container-based incident?
Response:

• A.Recovery
• B.Eradication
• C.Identification
• D.Containment

In Linux, user account information is stored in the ______ file.
Response:

• A./etc/people
• B./etc/accounts
• C./etc/users
• D./etc/passwd