MENU
Refer to the exhibit.
What is the indicator of compromise?
Suggested Answer: A
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The STIX data structure shows a pattern field with this entry:
file:hashes.'SHA-256' = '3299f07bc0711b3587fe8a1c6bf3ee6cbcc14cb775f64b28a61d72ebcb8968d3'
This value is a SHA-256 file hash, a well-known indicator of compromise (IoC) for identifying malicious files.
Therefore, the correct answer is:
A . SHA256 file hash.
1 comments · newest first
AL
Alyce
13 hours ago
I think the SHA256 file hash could be the indicator of compromise, but I'm not entirely sure if it's the best choice.