Match the MITRE ATT&CK Tactic to the Technique it falls into folowing: Which one of the below match with lateral movement? Steal application access token Scheduled task/job Command and scripting interpreter Traffic signaling Supply chain compromise Build image on host Exportation of remote services Gather victim host information

Match the MITRE ATT&CK Tactic to the Technique it falls into folowing: Which one of the below match with lateral movement? Steal application access token Scheduled task/job Command and scripting interpreter Traffic signaling Supply chain compromise Build image on host Exportation of remote services Gather victim host information

LINUX+ AND LPIC-1 GDE.TO LINUX CERTIF.

5th Edition

ISBN:9781337569798

Author:ECKERT

Publisher:ECKERT

Chapter11: Compression, System Backup, And Software Installation

Section: Chapter Questions

Problem 3DE

See similar textbooks

Similar questions

Describe the security behavior of a Java Enterprise Edition environment by explaining how native authentication and authorization services are deployed step-by-step when a web client requests access to protected resources oExplain the steps used by a Java Enterprise Edition environment to install native authentication and authorization services when a web client requests access to restricted resources on a web server. Insist on proper APA style use.n a web server. Please use APA format accurately
Clients are reporting slowness when attempting to access a series of load-balanced APIs that do not require authentication. The servers that host the APIs are showing heavy CPU utilization. No alerts are found on the WAFs sitting in front of the APIs. Which of the following should a security engineer recommend to BEST remedy the performance issues in a timely manner? Options: A Implement rate limiting on the API. B Implement geoblocking on the WAF. C Implement OAuth 2.0 on the API. D Implement input validation on the API. if you could explain why you chose that correct choice, Id appreciate it. Thank you!
A local Windows 10 administrator created a group called Trainees using Computer Management console. Then, he assigned local users in this security group. Members of the Trainees group need access to a custom application running on a domain-joined server Srv01. Can the Trainees group be used to provide access to this application? True False
A company created an external application for its customers. A security researcher now reports that the application has a serious LDAP injection vulnerability that could be leveraged to bypass authentication and authorization. Which of the following actions would BEST resolve the issue? (Choose two.) : A. Deploy a WAF. B. Use containers. C. Conduct input sanitization. D. Patch the OS E. Deploy a reverse proxy F. Deploy a SIEM. ~if you could explain why you chose that correct choice, Id appreciate it. Thank you!
What allows for a single configuration to be set and then deployed to many or all users? a. Snap-In Replication (SIR) b. Active Directory c. Group Policy d. Command Configuration
Which of the following best describes how the logging approach called "local logging" is different from its counterpart approach? A It works in four parts: log collection transport, storage, and analysis. B It records changes to firewall policy C It collects and aggregates logs in one central location. D It is used by systems that have a limited number of hosts.
On servers with Linux operating system, access logs are kept under which of the following directories by default?A) /var/log/B) /var/log/auth/C)/log/D)/log/auth/ Which of the following would an attacker prefer to run operating system-level code with MSSQL?A) MSSQL cannot run code at the operating system level.B) MSSQL agentC) xp_cmdshellD) There are no options. As a network administrator, you want to reduce the attack surface on your systems. Which of the following helps?A) Creating shared folderB) Make sure that only the necessary services are activeC) To record access activitiesD) monitor network traffic Which of the following products can an institution prefer to use if its antivirus software is up-to-date on the computers in its network?A) FirewallB) DLPC) Web ProxyD) NAC When John enters the mobile banking app on his smartphone, he sees his account balance is decreasing. What would it be better for John to do first to fix this situation?A) Closing and reopening the mobile…
You have a project in Azure DevOps named Project1. You deploy an Azure virtual machine named VM1 that runs Linux Ubuntu 18.04. You plan to add VM1 to Project1 as a self-hosted agent by running the build-agent.sh script from GitHub. Which two environment variables must you set for the script to complete successfully? Select all answers that apply. A. AZP_URL B. AZP_TOKEN C. AZP_AGENT_VERSION D. AZP_AGENT_NAME E. AZP_POOL
Where are individual user tasks scheduled to run with the cron daemon stored on aFedora system?a. /etc/crontabb. /etc/cron/(the user’s login name)c. /var/spool/crond. /var/spool/cron/(the user’s login name)
Ravi wants to develop a simple web application which has a login page. The login page has username field, password field, and a submit button. The authentication is done in the backend using the stored list of usernames and passwords. Please help Ravi by providing a list of below requirements to implement a web application: 1) Frontend technologies 2) Backend technologies 3) Any one programming language
Some students are starting a newspaper called 352times, they have the following security goals: Anyone should be able to read the paper with minimal effort, without doing anything more than sending a request to the newspaper’s server and reading the request in plaintext, ignoring any part of it that is not plaintext Those who care should be able to put in a bit more effort to verify that the newspaper was written by the true authors, without any additional communication with the newspaper Any unauthorized changes in the newspaper should be detected by the group of people who care Write a protocol for the newspaper to publish its news. Write the protocol that the people who want to verify the authorship and detect any unauthorized changes would use.
A. COPE is a more relaxed version of BYOD where employees can choose from a list of company-approved devices. True False B. A router crushing can be classified as an event True False C. In Linux file systems, a useful tool is the archive bit in each file’s property. True False