This certification validates practical skills in system administration and infrastructure, including deployment, administration, troubleshooting, and resilience. It is intended for professionals operating dependable enterprise technology environments.
An attacker performs reconnaissance on a Chief Executive Officer (CEO) using publicity available resources to gain access to the CEOs office. The attacker was in the CEOs office for less than five minutes, and the attack left no traces in any logs, nor was there any readily identifiable cause for the exploit. The attacker in then able to use numerous credentials belonging to the CEO to conduct a variety of further attacks. Which of the following types of exploit is described?
Which of the following is an automated password cracking technique that uses a combination of upper and lower case letters, 0-9 numbers, and special characters?
A zero-day vulnerability is discovered on a companys network. The security analyst conducts a log review, schedules an immediate vulnerability scan, and quarantines the infected system, but cannot determine the root cause of the vulnerability. Which of the following is a source of information that can be used to identify the cause of the vulnerability?
The Chief Information Officer (CIO) of a company asks the incident responder to update the risk management plan. Which of the following methods can BEST help the incident responder identify the risks that require in-depth analysis?
A security analyst for a financial services firm is monitoring blogs and reads about a zero-day vulnerability being exploited by a little-known group of hackers. The analyst wishes to independently validate and corroborate the blogs posting. Which of the following sources of information will provide the MOST credible supporting threat intelligence in this situation?