Question

1. A network interface found in a promiscuous mode on an enterprise network would NOT be considered a possible symptom of system compromise.

True

False

2. What is wrong with the system activity in this image?

		The notepad application is running with system level privileges.
		Notepad.exe is running ahead of svchost.exe
		notepad.exe is too large (2444 MBs)
		notepad.exe is running out of the system32 folder

3. What is the Gold Disk?

		Something The Beatles have too many of.
		A desktop deployment standard with all of the same programs, services, and baseline features installed for continuity.
		A set of server backups placed on a high capacity optical disk
		A compilation of patches, fixes, and security controls that can be run on the host machine in order to advert network traffic congestion.

4. Host-Based monitoring will alert on all of the following except:

		Changes to the system registry
		Kernel changes
		Zero-day browser exploits
		falied login attempts

Answer 1

Hey here is answer to your question.

1. False , because promiscuous mode allow to capture the network packets which is not intended for network interface.

2. notepad.exe is too large (2444 MBs) as its relatively small file in real life.

3. A desktop deployment standard with all of the same programs, services, and baseline features installed for continuity.

4.falied login attempts

In case of any doubt please comment. Happy Learning :)