Free EC-COUNCIL 312-39 Exam Dumps Questions & Answers

What does the Security Log Event ID 4624 of Windows 10 indicate?

• A.  An account was successfully logged on
• B.  A share was assessed
• C.  Service added to the endpoint
• D.  New process executed

Identify the attack, where an attacker tries to discover all the possible information about a target network before launching a further attack.

• A.  Reconnaissance Attack
• B.  Man-In-Middle Attack
• C.  Ransomware Attack
• D.  DoS Attack

Harley is working as a SOC analyst with Powell Tech. Powell Inc. is using Internet Information Service (IIS) version 7.0 to host their website.
Where will Harley find the web server logs, if he wants to investigate them for any anomalies?

• A.  %SystemDrive%\LogFiles\logs\W3SVCN
• B.  SystemDrive%\LogFiles\inetpub\logs\W3SVCN
• C.  SystemDrive%\ inetpub\LogFiles\logs\W3SVCN
• D.  SystemDrive%\inetpub\logs\LogFiles\W3SVCN

In which log collection mechanism, the system or application sends log records either on the local disk or over the network.

• A.  push-based
• B.  signature-based
• C.  pull-based
• D.  rule-based

What is the correct sequence of SOC Workflow?

• A.  Collect, Respond, Validate, Ingest, Report, Document
• B.  Collect, Ingest, Document, Validate, Report, Respond
• C.  Collect, Ingest, Validate, Report, Respond, Document
• D.  Collect, Ingest, Validate, Document, Report, Respond