Refer to the exhibit. What results from this script?

A company recently started accepting credit card payments in their local warehouses and is undergoing a PCI audit. Based on business requirements, the company needs to store sensitive authentication data for 45 days. How must data be stored for compliance?

Engineers are working to document, list, and discover all used applications within an organization. During the regular assessment of applications from the HR backup server, an engineer discovered an unknown application. The analysis showed that the application is communicating with external addresses on a non- secure, unencrypted channel. Information gathering revealed that the unknown application does not have an owner and is not being used by a business unit. What are the next two steps the engineers shou

A security incident affected an organization's critical business services, and the customer-side web API became unresponsive and crashed. An investigation revealed a spike of API call requests and a high number of inactive sessions during the incident. Which two recommendations should the engineers make to prevent similar incidents in the future? (Choose two.)

A security analyst needs to investigate a security incident involving several suspicious connections with a possible attacker. Which tool should the analyst use to identify the source IP of the offender?

Refer to the exhibit. Which command was executed in PowerShell to generate this log?

A threat actor attacked an organization’s Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial

Refer to the exhibit. An engineer notices a significant anomaly in the traffic in one of the host groups in Cisco SecureNetwork Analytics (Stealthwatch) and must analyze the top data transmissions. Which tool accomplishes this task?

Refer to the exhibit. For IP 192.168.1.209, what are the risk level, activity, and next step?

Cisco Advanced Malware Protection installed on an end-user desktop has automatically submitted a low prevalence file to the Threat Grid analysis engine for further analysis. What should be concluded from this report?

An analyst received multiple alerts on the SIEM console of users that are navigating to malicious URLs. The analyst needs to automate the task of receiving alerts and processing the data for further investigations. Three variables are available from the SIEM console to include in an automation script: console_ip, api_token, and reference_set_name. What must be added to this script to receive a successful HTTP response? #!/usr/bin/python import sys import requests

A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked foran organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elementsare missing to calculate the risk assessment? (Choose two.)

An audit is assessing a small business that is selling automotive parts and diagnostic services. Due to increased customerdemands, the company recently started to accept credit card payments and acquired a POS terminal. Which complianceregulations must the audit apply to the company?

A security expert is investigating a breach that resulted in a $32 million loss from customer accounts. Hackers were able tosteal API keys and two-factor codes due to a vulnerability that was introduced in a new code a few weeks before the attack.Which step was missed that would have prevented this breach?

A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?

A cloud engineer needs a solution to deploy applications on a cloud without being able to manage and control the server OS.Which type of cloud environment should be used?

Refer to the exhibit. Rapid Threat Containment using Cisco Secure Network Analytics (Stealthwatch) and ISE detects thethreat of malware-infected 802.1x authenticated endpoints and places that endpoint into a quarantine VLAN using AdaptiveNetwork Control policy. Which method was used to signal ISE to quarantine the endpoints?

Refer to the exhibit. Cisco Advanced Malware Protection installed on an end-user desktop automatically submitted a lowprevalence file to the Threat Grid analysis engine. What should be concluded from this report?

Refer to the exhibit. An engineer configured this SOAR solution workflow to identify account theft threats and privilegeescalation, evaluate risk, and respond by resolving the threat. This solution is handling more threats than Security analystshave time to analyze. Without this analysis, the team cannot be proactive and anticipate attacks. Which action willaccomplish this goal?

An engineer is investigating several cases of increased incoming spam emails and suspicious emails from the HR andservice departments. While checking the event sources, the website monitoring tool showed several web scraping alertsovernight. Which type of compromise is indicated?

The network operations center has identified malware, created a ticket within their ticketing system, and assigned the case to the SOC with high-level information. A SOC analyst was able to stop the malware from spreading and identified the attacking host. What is the next step in the incident response workflow?