Q75. Following a ransomware incident, the network teamprovided a PCAP file, titled ransom.pcap, located in theInvestigations folder on the Desktop.
What is the full User-Agent value associated with theransomware demand file download. Enter your responsein the field below.

Q76. Which of the following tactics is associated with application programming interface (API) requests that may result in bypassing access control checks?

Q77. Which of the following is the MOST effective method for identifying vulnerabilities in a remote web application?

Q78. The user of the Accounting workstation reported thattheir calculator repeatedly opens without their input.
The following credentials are used for thisquestion.
Username:Accounting
Password:1x-4cc0unt1NG-x1
Using the provided credentials, SSH to the Accountingworkstation and generate a SHA256 checksum of the filethat triggered RuleName Suspicious PowerShell usingeither certutil or Get-FileHash of the file causing theissue. Copy the hash and paste it below.

Q79. Which of the following is a PRIMARY risk that can be introduced through the use of a site-to-site virtual private network (VPN) with a service provider?

Q80. Which ofthe following is .1 PRIMARY output from the development of a cyber risk management strategy?

Q81. Which of the following can be used to identity malicious activity through a take user identity?

Q82. For this question you must log into GreenboneVulnerability Manager using Firefox. The URL is:https://10.
10.55.4:9392 and credentials are:
Username:admin
Password:Secure-gvm!
A colleague performed a vulnerability scan but did notreview prior to leaving for a family emergency. It hasbeen determined that a threat actor is using CVE-2021-22145 in the wild. What is the host IP of the machinethat is vulnerable to this CVE?

Q83. A change advisory board Is meeting to review a remediation plan for a critical vulnerability, with a cybersecurity analyst in attendance. When asked about measures to address post-implementation issues, which o! the following would be the analyst’s BEST response?

Q84. Which of the following cyber crime tactics involves targets being contacted via text message by an attacker posing as a legitimate entity?

Q85. Which of the following should be considered FIRST when defining an application security risk metric for an organization?

Q86. Which of the following should occur FIRST during the vulnerability identification phase?

Q87. Which of the following Is a control message associated with the Internet Control Message Protocol (ICMP)?

Q88. Which of the following would BCST enable an organization to prioritize remediation activities when multiple vulnerabilities are identified?

Q89. Which of the following MOST effectively minimizes the impact of a control failure?

Q90. Which of the following should be considered FIRST when determining how to protect an organization’s information assets?

Q91. An attacker has exploited an e-commerce website by injecting arbitrary syntax that was passed to and executed by the underlying operating system. Which of the following tactics did the attacker MOST likely use?

Q92. A penetration tester has been hired and given access to all code, diagrams,and documentation. Which type oftesting is being conducted?

Q93. Which of the following utilities is MOST suitable for administrative tasks and automation?