Infosys Certified Cyber Defender

After seeing a password-guessing alert in the SIEM, which of the following actions can be used to “contain” the attack? (Choose TWO)

Problem Statement: An attacker attacks a known public Apache web server. The attacker gains access to the web server and uploads scripts that send the server’s crucial data to the attacker every minute to maintain access to the server. Finally, the attacker shuts the Apache service at one-minute intervals. Based on the above scenario, answer the following question. The attacker performs a port-scanning operation that targets a web server to gather data about open ports on the system and possibly to identify the service behind these ports. The port scanning operation performed in this scenario is a technique involved in which of the following phases?

Following a password guessing alert in the SIEM, which of the following places (log sources/viewers) can be investigated to prove the password guessing was successful? (Choose TWO)

Which of the following security controls would have helped in preventing the website defacement attack? (Choose TWO)

Problem Statement: An attacker attacks a known public Apache web server. The attacker gains access to the web server and uploads scripts that send the server’s crucial data to the attacker every minute to maintain access to the server. Finally, the attacker shuts the Apache service at one-minute intervals. Based on the above scenario, answer the following question. Which authentication-based services were running on the web server that the attacker used as a target to gain access?

After executing a successful SQL injection attack on the website, which of the services below were stopped by an adversary?

During the investigation, you discover a file named "SERVICES-User055-KlOut.txt" in the user's temporary directory. What does this file likely contain?

Why did the attacker do SSH protocol fuzzing?

Which of the following alerts was seen on the SIEM?

Problem Statement: An attacker attacks a known public Apache web server. The attacker gains access to the web server and uploads scripts that send the server’s crucial data to the attacker every minute to maintain access to the server. Finally, the attacker shuts the Apache service at one-minute intervals. Based on the above scenario, answer the following question. The repetitive behavior of the Apache service stop command indicates that a scheduled task is being used to stop the service in fixed-time intervals. Which task scheduler application is used to control the Apache service?