300-215 Practice Exam Questions and Answers

A.  

An email was sent with an attachment named “Grades.doc.exe”.

B.  

An email was sent with an attachment named “Grades.doc”.

C.  

An email was sent with an attachment named “Final Report.doc”.

D.  

An email was sent with an attachment named “Final Report.doc.exe”.

A.  

brute-force attack against the web application user accounts

B.  

XSS attack against the target webserver

C.  

brute-force attack against directories and files on the target webserver

D.  

SQL injection attack against the target webserver

A.  

The attacker used r57 exploit to elevate their privilege.

B.  

The attacker uploaded the word press file manager trojan.

C.  

The attacker performed a brute force attack against word press and used sql injection against the backend database.

D.  

The attacker used the word press file manager plugin to upoad r57.php.

E.  

The attacker logged on normally to word press admin page.

A.  

Formalize reporting requirements and responsibilities to update management and internal stakeholders throughout the incident-handling process effectively.

B.  

Improve the mitigation phase to ensure causes can be quickly identified, and systems returned to a functioning state.

C.  

Implement an automated operation to pull systems events/logs and bring them into an organizational context.

D.  

Allocate additional resources for the containment phase to stabilize systems in a timely manner and reduce an attack’s breadth.

E.  

Modify the incident handling playbook and checklist to ensure alignment and agreement on roles, responsibilities, and steps before an incident occurs.

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

A.  

/var/log/syslog.log

B.  

/var/log/vmksummary.log

C.  

var/log/shell.log

D.  

var/log/general/log

A.  

Unicode

B.  

Binary

C.  

Base64

D.  

Charcode

A.  

/var/log/access.log

B.  

/var/log/messages.log

C.  

/var/log/httpd/messages.log

D.  

/var/log/httpd/access.log