EC-COUNCIL EC-COUNCIL Certifications 312-39 Questions & Answers

• Question 51:

  Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks. What among the following should Wesley avoid from considering?

  A. Deserialization of trusted data must cross a trust boundary

  B. Understand the security permissions given to serialization and deserialization

  C. Allow serialization for security-sensitive classes

  D. Validate untrusted input, which is to be serialized to ensure that serialized data contain only trusted classes

  Correct Answer: C

• Question 52:

  An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company's URL as follows:

  http://technosoft.com.com/.

  Identify the attack demonstrated in the above scenario.

  A. Cross-site Scripting Attack

  B. SQL Injection Attack

  C. Denial-of-Service Attack

  D. Session Attack

  Correct Answer: D

• Question 53:

  According to the Risk Matrix table, what will be the risk level when the probability of an attack is very high, and the impact of that attack is major? NOTE: It is mandatory to answer the question before proceeding to the next one.

  A. High

  B. Extreme

  C. Low

  D. Medium

  Correct Answer: A

  Reference: https://onlinelibrary.wiley.com/page/journal/15396924/homepage/special_issue__simple_characterisations_and_communication_of_risks.htm

• Question 54:

  John, a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(\.|(%|%25)2E)(\.|(%|%25)2E)(\/|(%|%25)2F|\\|(%|%25)5C)/i. What does this event log indicate?

  A. XSS Attack

  B. SQL injection Attack

  C. Directory Traversal Attack

  D. Parameter Tampering Attack

  Correct Answer: A

• Question 55:

  Which of the following data source can be used to detect the traffic associated with Bad Bot User-Agents?

  A. Windows Event Log

  B. Web Server Logs

  C. Router Logs

  D. Switch Logs

  Correct Answer: B

• Question 56:

  Daniel is a member of an IRT, which was started recently in a company named Mesh Tech. He wanted to find the purpose and scope of the planned incident response capabilities. What is he looking for?

  A. Incident Response Intelligence

  B. Incident Response Mission

  C. Incident Response Vision

  D. Incident Response Resources

  Correct Answer: D

  Reference: https://blog.eccouncil.org/phases-of-an-incident-response-plan/

• Question 57:

  Properly applied cyber threat intelligence to the SOC team help them in discovering TTPs. What does these TTPs refer to?

  A. Tactics, Techniques, and Procedures

  B. Tactics, Threats, and Procedures

  C. Targets, Threats, and Process

  D. Tactics, Targets, and Process

  Correct Answer: A

  Reference: https://www.crest-approved.org/wp-content/uploads/CREST-Cyber-Threat-Intelligence.pdf

• Question 58:

  Which of the following threat intelligence is used by a SIEM for supplying the analysts with context and "situational awareness" by using threat actor TTPs, malware campaigns, tools used by threat actors.

  1.

  Strategic threat intelligence

  2.

  Tactical threat intelligence

  3.

  Operational threat intelligence

  4.

  Technical threat intelligence

  A. 2 and 3

  B. 1 and 3

  C. 3 and 4

  D. 1 and 2

  Correct Answer: A

  Reference: https://hodigital.blog.gov.uk/wp-content/uploads/sites/161/2020/03/Cyber-Threat-Intelligence-A-Guide-For-Decision-Makers-and-Analysts-v2.0.pdf (38)

• Question 59:

  Chloe, a SOC analyst with Jake Tech, is checking Linux systems logs. She is investigating files at /var/log/wtmp. What Chloe is looking at?

  A. Error log

  B. System boot log

  C. General message and system-related stuff

  D. Login records

  Correct Answer: D

  Reference: https://stackify.com/linux-logs/

• Question 60:

  A type of threat intelligent that find out the information about the attacker by misleading them is known as __________.

  A. Threat trending Intelligence

  B. Detection Threat Intelligence

  C. Operational Intelligence

  D. Counter Intelligence

  Correct Answer: C

  Reference: https://www.recordedfuture.com/threat-intelligence/