Donald made an OS disk snapshot of a compromised Azure VM under a resource group being used by the affected company as a part of forensic analysis process. He then created a vhd file out of the snapshot and stored it in a file share and as a page blob as backup in a storage account under different region. What Is the next thing he should do as a security measure?

Delete the snapshot from the source resource group

Recommend changing the access policies followed by the company

Delete the snapshot from the source resource group

Delete the OS disk of the affected VM altogether

Create another VM by using the snapshot

Simona has written a regular expression for the detection of web application-specific attack attempt that reads as /((\%3C)|)/lx. Which of the following does the part (|\%3E)|>) look for?

Closing angle bracket or its hex equivalent

Alphanumeric string or its hex equivalent

Opening angle bracket or its hex equivalent

Closing angle bracket or its hex equivalent

Forward slash for a closing tag or its hex equivalent

Federal Information Security Management act of 2002

Health insurance Probability and Accountability act of 1996

Look for distinct repeating patterns on the hard drive at the bit level

Document in your report that you suspect a drive wiping utility was used, but no evidence was found

Check the list of installed programs

Load various drive wiping utilities offline, and export previous run reports

Look for distinct repeating patterns on the hard drive at the bit level

Compliance with the Fourth Amendment of the U.S. Constitution

Compliance with the Second Amendment of the U.S. Constitution

Compliance with the Third Amendment of the U.S. Constitution

Compliance with the Fourth Amendment of the U.S. Constitution

Senders cannot use misleading or false header information

Senders should never share their physical postal address in the email

Senders must use deceptive subject lines

Emails must not contain information regarding how to stop receiving emails from the sender in future

Notify the fact to the local authority or employer

Remove the battery or turn-off the device

Protect the device against external communication

Obtain formal written consent to search

Which of the following tools is used to dump the memory of a running process, either immediately or when an error condition occurs?

Become a Premium Member for full access