1. Which definition of a fork in Linux is true?

2. Which identifier is used to describe the application or process that submitted a log message?

3. Which protocol is expected to have NTP a user agent, host, and referrer headers in a packet capture?

4. Which evasion method involves performing actions slower than normal to prevent detection?

5. Which type of attack occurs when an attacker is successful in eavesdropping on a conversation between two IPS phones?

6. Which definition of permissions in Linux is true?

7. Which definition describes the main purpose of a Security Information and Event Management solution?

8. If a web server accepts input from the user and passes it to a bash shell, to which attack method is it vulnerable?

9. Which security monitoring data type is associated with application server logs?

10. Which two terms are types of cross site scripting attacks? (Choose two)