Performing CyberOps Using Core Security Technologies (CBRCOR)

The physical security department received a report that an unauthorized person followed an authorized individual to enter a secured premise. The incident was documented and given to a security specialist to analyze. Which step should be taken at this stage?

A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment.
The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)

Refer to the exhibit. At which stage of the threat kill chain is an attacker, based on these URIs of inbound web requests from known malicious Internet scanners?

Refer to the exhibit. How must these advisories be prioritized for handling?

Refer to the exhibit. Which two steps mitigate attacks on the webserver from the Internet? (Choose two.)