GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ750

Endpoint Attack and Pivoting

Which of the following actions can stop Metasploit from being used successfully against a Windows host?

  • A Deploying User and Entity Behavior Analytics (UEBA) tools
  • B Using the Microsoft Anti-Cross Site Scripting Library
  • C Deploying controls on what applications are allowed to run
  • D Tracking UserIDs for unsuccessful login attempts
Explanation

Application control restricts the executables, scripts, DLLs, installers, and other code that may run on a Windows device. Proper allowlisting can prevent unapproved Metasploit components or payloads from executing.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!