NSM-4

Users in a company have complained about network performance. After investigation, the IT staff has determined that an attacker has used a specific technique that affects the TCP three-way handshake. What is the name of this type of network attack?

• • DNS poisoning

• • session hijacking

• • SYN flood

• • DDoS

In which type of attack is falsified information used to redirect users to malicious Internet sites?

• • domain generation

• • ARP cache poisoning

• • DNS amplification and reflection

• • DNS cache poisoning

Which type of business policy establishes the rules of conduct and the responsibilities of employees and employers?

• • data

• • security

• • employee

• • company

Which two areas must an IT security person understand in order to identify vulnerabilities on a network? (Choose two.)

• • hardware used by applications

• • data analysis trends

• • number of systems on each network

• • network baseline data

• • important applications used

What does the MITRE Corporation create and maintain?

• • IOC

• • TAXII

• • CVE

• • STIX

Why do several network organizations, professionals, and intelligence agencies use shared open standards for threat intelligence?

• • to ensure real-time synchronization of all antivirus signature databases

• • to enable exchange of all response mechanisms to new threats

• • to update all vulnerabilities databases across all malware vendors

• • to enable the exchange of CTI in an automated, consistent, and machine readable format