[Q30-Q47] Latest 312-39 Exam with Accurate Certified SOC Analyst (CSA) PDF Questions [Sep 28, 2022]

Q30. Identify the type of attack, an attacker is attempting on www.example.com website.

Q31. An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company’s URL as follows:
http://technosoft.com.com/<script>alert(“WARNING: The application has encountered an error”);</script>.
Identify the attack demonstrated in the above scenario.

Q32. Which of the following is a default directory in a Mac OS X that stores security-related logs?

Q33. Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

Q34. An organization wants to implement a SIEM deployment architecture. However, they have the capability to do only log collection and the rest of the SIEM functions must be managed by an MSSP.
Which SIEM deployment architecture will the organization adopt?

Q35. Which of the following Windows event is logged every time when a user tries to access the “Registry” key?

Q36. Which of the following factors determine the choice of SIEM architecture?

Q37. Which of the following service provides phishing protection and content filtering to manage the Internet experience on and off your network with the acceptable use or compliance policies?

Q38. Identify the HTTP status codes that represents the server error.

Q39. What does the HTTP status codes 1XX represents?

Q40. Identify the attack in which the attacker exploits a target system through publicly known but still unpatched vulnerabilities.

Q41. Which of the following threat intelligence is used by a SIEM for supplying the analysts with context and
“situational awareness” by using threat actor TTPs, malware campaigns, tools used by threat actors.
1.Strategic threat intelligence
2.Tactical threat intelligence
3.Operational threat intelligence
4.Technical threat intelligence

Q42. Which of the following stage executed after identifying the required event sources?

Q43. Which of the following technique protects from flooding attacks originated from the valid prefixes (IP addresses) so that they can be traced to its true source?

Q44. An organization is implementing and deploying the SIEM with following capabilities.

What kind of SIEM deployment architecture the organization is planning to implement?

Q45. Which of the following steps of incident handling and response process focus on limiting the scope and extent of an incident?

Q46. What is the correct sequence of SOC Workflow?

Q47. Wesley is an incident handler in a company named Maddison Tech. One day, he was learning techniques for eradicating the insecure deserialization attacks.
What among the following should Wesley avoid from considering?