25. Incident Response Quiz

What phase of the incident response process is focused on in this lab?

• Preparation

• Detection

• Eradication

• Containment

What command is used to add the word 'password' to the 57th line of a file?

• grep

• awk

• cat

• sed

What is the name of the file where the password list is saved?

• pass.txt

• passlist.txt

• password_list.txt

• passwords.txt

What is the default username for logging into the Wazoo platform?

• admin

• user

• guest

• root

Which IP address is used to access the Wazoo platform?

• 10.1.1.16242

• 172.16.0.1

• 192.168.1.1

• 10.0.0.1

What tool is used to conduct a password attack in this lab?

• Hydra

• John the Ripper

• Nmap

• Metasploit

What protocol is targeted by Hydra in the password attack?

• FTP

• SSH

• RDP

• HTTP

What is the significance of the 57th line in the password attack?

• It contains the username

• It contains the correct password

• It contains the IP address

• It contains the attacker's name

What is the role of a SOC analyst in the incident response process?

• Writing documentation

• Managing network hardware

• Analyzing detected events

• Developing software

What is the purpose of mounting a shared drive as Jamie?

• To clear logs

• To install software

• To access files

• To conduct a password attack