Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Eccouncil 212-82 Exam - Topic 9 Question 59 Discussion

Actual exam question for Eccouncil's 212-82 exam
Question #: 59
Topic #: 9
[All 212-82 Questions]

A threat intelligence feed data file has been acquired and stored in the Documents folder of Attacker Machine-1 (File Name: Threatfeed.txt). You are a cybersecurity technician working for an ABC organization. Your organization has assigned you a task to analyze the data and submit a report on the threat landscape. Select the IP address linked with http://securityabc.s21sec.com.

Show Suggested Answer Hide Answer
Suggested Answer: D

5.9.188.148 is the IP address linked with http://securityabc.s21sec.com in the above scenario. A threat intelligence feed is a source of data that provides information about current or potential threats and attacks that can affect an organization's network or system. A threat intelligence feed can include indicators of compromise (IoCs), such as IP addresses, domain names, URLs, hashes, etc., that can be used to detect or prevent malicious activities. To analyze the threat intelligence feed data file and determine the IP address linked with http://securityabc.s21sec.com, one has to follow these steps:

Navigate to the Documents folder of Attacker-1 machine.

Open Threatfeed.txt file with a text editor.

Search for http://securityabc.s21sec.com in the file.

Observe the IP address associated with the URL.

The IP address associated with the URL is 5.9.188.148, which is the IP address linked with http://securityabc.s21sec.com.


Contribute your Thoughts:

0/2000 characters
Myra
1 month ago
I’m not sure, but I think B) is the best choice.
upvoted 0 times
...
Jerry
1 month ago
I’d go with C) 5.9.110.120. It’s less common.
upvoted 0 times
...
Kallie
2 months ago
I feel like it could be D) 5.9.188.148. Just a hunch.
upvoted 0 times
...
Louvenia
2 months ago
I’m leaning towards A) 5.9.200.200. Looks like a valid option.
upvoted 0 times
...
Geraldine
2 months ago
I think it's B) 5.9.200.150. Seems familiar.
upvoted 0 times
...
France
2 months ago
Wait, how do we know it's any of these?
upvoted 0 times
...
Charlene
2 months ago
I agree with Carylon, B seems right.
upvoted 0 times
...
Albert
2 months ago
Not so sure about that, could be C) 5.9.110.120.
upvoted 0 times
...
Launa
3 months ago
Definitely A) 5.9.200.200!
upvoted 0 times
...
Carylon
3 months ago
I think it's B) 5.9.200.150.
upvoted 0 times
...
Sherrell
3 months ago
Lol, this exam is like a game of IP address roulette. I'm just going to close my eyes and pick one.
upvoted 0 times
...
Cecilia
4 months ago
Option D is the way to go, no doubt about it. Gotta trust that threat intelligence data!
upvoted 0 times
...
Rory
4 months ago
This is a tough one, but I'm leaning towards A. The IP address just feels right, you know?
upvoted 0 times
...
Yolande
4 months ago
Haha, I bet the hackers are just trying to trick us with these options. I'm going with C, just to be safe.
upvoted 0 times
...
Rima
4 months ago
I vaguely remember something about DNS lookups. Should I just ping the URL to find the IP? I hope that’s what they want us to do here.
upvoted 0 times
...
Pok
4 months ago
I feel like I should be able to do this, but I’m second-guessing myself. Was it a command line tool we used to resolve URLs?
upvoted 0 times
...
Lashon
5 months ago
I think we had a similar question in our last mock exam about identifying IP addresses from links. I might lean towards option B, but I'm not sure.
upvoted 0 times
...
Rosendo
5 months ago
I remember we practiced analyzing threat feeds, but I can't recall how to extract the IP from a URL directly.
upvoted 0 times
...
Jamal
5 months ago
This seems straightforward enough. I'm confident I can find the right IP address in the threat feed data. I'll just need to carefully review the information and match it to the provided domain.
upvoted 0 times
...
Vivienne
5 months ago
Okay, I've got a strategy for this. I'll first scan through the file to see if the domain is listed directly with an associated IP. If not, I'll look for any other indicators that might point to the correct IP address.
upvoted 0 times
...
Oneida
5 months ago
This question is tricky. I hope I remember the right IP.
upvoted 0 times
...
Terrilyn
6 months ago
I'm not sure, I think option B might be the correct answer. The IP address seems more plausible.
upvoted 0 times
...
Gaynell
6 months ago
Option D looks good to me, the IP address seems to match the domain.
upvoted 0 times
...
Alishia
6 months ago
I'm a bit unsure about this one. Analyzing threat data can be tricky, and I want to make sure I don't miss anything important. Maybe I'll try to find some additional context clues in the file to help narrow down the answer.
upvoted 0 times
...
Lelia
6 months ago
Hmm, this looks like a straightforward question about analyzing a threat intelligence feed. I'll need to carefully review the file contents to identify the IP address linked to the given domain.
upvoted 0 times
Gilma
23 days ago
Keep searching! We’ll find the right one soon.
upvoted 0 times
...
Kyoko
28 days ago
I found some IPs, but none match the domain yet.
upvoted 0 times
...
Scarlet
1 month ago
I have a feeling the answer might be in the first few lines.
upvoted 0 times
...
Wayne
5 months ago
Agreed! Let's look for that specific domain.
upvoted 0 times
...
Leonora
6 months ago
I think we should start by opening the Threatfeed.txt file.
upvoted 0 times
...
...

Save Cancel