Chapter 14 – Mock Exam 1

1. 1. pcregrep.
2. 1. SOX.
3. 3. It is commonly used by threat actors because it is also used in common legitimate applications.
4. 4. Mozilla/5.0 (X11; x86_64; rv:21.0) Gecko/20100101 Firefox/21.0.
5. 4. Analysis resulting in conclusive results.
6. 2. tcpdump uses UTC time, where Wireshark's packet list pane uses relative timestamps.
7. 3. A rule with priority 1 in a policy with priority 4.
8. 1. Actors, Actions, Assets, Attributes.
9. 1. To determine the format for emails within the organization in order to generate whale phishing targets from the publicly accessible directors list.
10. 1. As generic as possible.
11. 4. Virtual Alloc.
12. 1. At the network layer, the address is maintained from the sending computer to the destination computer.
13. 4. User Interaction: Required.
14. 3. Confidentiality | Integrity | Availability.
15. 3. Exploits are linked to observed vulnerabilities in the...