Question No. 1

How do you verify that one of your hosts is potentially compromised based on their communication

destinations?

• A. Search the communication destinations of the host in the Talos IP & Domain Reputation Center.
• B. Analyze how much traffic the host sent and received from each IP address or domain.
• C. See if any Stealthwatch alarms were triggered for the host communicating with internal hosts.
• D. Check the Firepower appliance to see if malicious files were downloaded.

Question No. 2

Which command can be used to find open ports on a system?

• A. netstat -I
• B. netstat -v
• C. netstat -r
• D. netstat-g

Question No. 3

Which of the following is not a metadata feature of the Diamond Model?

• A. Direction
• B. Result
• C. Devices
• D. Resources

Question No. 4

Which regular expression matches “color” and “colour”?

• A. col[0-9]+our
• B. colo?ur
• C. colou?r
• D. ]a-z]{7}