Package deal
GCIH Correctly Answered Questions and Answers Pack| UpToDate | Already Graded A+
GCIH Correctly Answered Questions and Answers Pack| UpToDate | Already Graded A+
[Show more]GCIH Correctly Answered Questions and Answers Pack| UpToDate | Already Graded A+
[Show more]Who should make the decision of when to put a system back into production? 
A) Systems administrators 
B) Business team 
C) Security team 
D) Data owner ☑: B) Business team 
Which command will display ASCII and Unicode strings within a malware sample? 
A) cat 
B) Get-Strings 
C) strings 
D) findst...
Preview 4 out of 50 pages
Add to cartWho should make the decision of when to put a system back into production? 
A) Systems administrators 
B) Business team 
C) Security team 
D) Data owner ☑: B) Business team 
Which command will display ASCII and Unicode strings within a malware sample? 
A) cat 
B) Get-Strings 
C) strings 
D) findst...
sptoolkit ☑: Phishing framework 
Phishme ☑: Phishing framework 
GRR Rapid Response ☑: Performing large-scale incident response and hunt teaming 
Rekall ☑: Memory Analysis tool 
Nessus ☑: Vulnerability Scanner 
Redline ☑: Malware reporting and risk assessment software
Preview 1 out of 4 pages
Add to cartsptoolkit ☑: Phishing framework 
Phishme ☑: Phishing framework 
GRR Rapid Response ☑: Performing large-scale incident response and hunt teaming 
Rekall ☑: Memory Analysis tool 
Nessus ☑: Vulnerability Scanner 
Redline ☑: Malware reporting and risk assessment software
netstat -naob ☑: network status, -o: process ID, -b: listening EXE and DLLs 
lsof -i ☑: UNIX: what services are running 
netstat -a ☑: UNIX/Windows - what services are running 
C:> tasklist ☑: what processes are running on the machine 
C:> tasklist /v ☑: what processes are runnin...
Preview 1 out of 4 pages
Add to cartnetstat -naob ☑: network status, -o: process ID, -b: listening EXE and DLLs 
lsof -i ☑: UNIX: what services are running 
netstat -a ☑: UNIX/Windows - what services are running 
C:> tasklist ☑: what processes are running on the machine 
C:> tasklist /v ☑: what processes are runnin...
A software management suite provided by Microsoft that allows users to manage a 
large number of Windows based computers. It features remote control, patch 
management, operating system deployment, network protection and other various 
services ☑: System Center Configuration Manager (SCCM) 
The...
Preview 2 out of 12 pages
Add to cartA software management suite provided by Microsoft that allows users to manage a 
large number of Windows based computers. It features remote control, patch 
management, operating system deployment, network protection and other various 
services ☑: System Center Configuration Manager (SCCM) 
The...
PICREL ☑: Preparation, Identification, Containment, Eradication, Recovery, Lessons 
Learned 
What are the 6 steps of Incident Response process? ☑: PICERL - Preparation, Identification, Containment, Eradication, Recovery, 
Lessons Learned 
HTTPS port ☑: TCP 443 
HTTP port ☑: TCP 80 
SMB Por...
Preview 2 out of 6 pages
Add to cartPICREL ☑: Preparation, Identification, Containment, Eradication, Recovery, Lessons 
Learned 
What are the 6 steps of Incident Response process? ☑: PICERL - Preparation, Identification, Containment, Eradication, Recovery, 
Lessons Learned 
HTTPS port ☑: TCP 443 
HTTP port ☑: TCP 80 
SMB Por...
What people should be brought in as an incident response team? ☑: * Security 
* Systems Admin 
* Network Management 
* Legal 
* HR 
* Public Affairs 
* Disaster Recovery 
* Union Rep 
How should the incident response team be organized? ☑: With onsite people 
Establish a baseline for response 
Wh...
Preview 3 out of 29 pages
Add to cartWhat people should be brought in as an incident response team? ☑: * Security 
* Systems Admin 
* Network Management 
* Legal 
* HR 
* Public Affairs 
* Disaster Recovery 
* Union Rep 
How should the incident response team be organized? ☑: With onsite people 
Establish a baseline for response 
Wh...
Q: What is the relative identifier for the "Performance Log Users" group on the host 
192.168.101.150? 
Use the credentials below: 
Username - Candidate 
Password - Pas$$w0rd ☑: A: rpcclient 102.168.101.150 -U Candidate 
<password from question> 
Rpcclient> enumalsgroups builtin 
Q: An...
Preview 2 out of 5 pages
Add to cartQ: What is the relative identifier for the "Performance Log Users" group on the host 
192.168.101.150? 
Use the credentials below: 
Username - Candidate 
Password - Pas$$w0rd ☑: A: rpcclient 102.168.101.150 -U Candidate 
<password from question> 
Rpcclient> enumalsgroups builtin 
Q: An...
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Stuvia is a marketplace, so you are not buying this document from us, but from seller ExamArsenal. Stuvia facilitates payment to the seller.
No, you only buy these notes for $21.49. You're not tied to anything after your purchase.
4.6 stars on Google & Trustpilot (+1000 reviews)
80796 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now