Eccouncil Exam 312-38 Topic 3 Question 103 Discussion

Actual exam question for Eccouncil's 312-38 exam

Question #: 103
Topic #: 3

Peter works as a network administrator at an IT company. He wants to avoid exploitation of the cloud, particularly Azure services. Which of the following is a group of PowerShell scripts designed to help the network administrator understand how attacks happen and help them protect the cloud?

AMicroBurst

BPOSH -Sysmon

CSecurityPolicyDsc

DSysmon

Show Suggested Answer

Suggested Answer: A

MicroBurst is a collection of PowerShell scripts designed to help network administrators understand how attacks occur and to protect cloud environments, particularly Azure services. These scripts aid in detecting vulnerabilities, simulating attacks, and implementing defensive measures to secure the cloud infrastructure.

POSH-Sysmon: A set of PowerShell scripts for managing Sysmon configurations.

SecurityPolicyDsc: A module for managing security policies through Desired State Configuration (DSC).

Sysmon: A Windows system service and device driver that logs system activity to the Windows event log, not specifically focused on cloud protection.

EC-Council Certified Network Defender (CND) Study Guide

by Glenn at Mar 06, 2025, 03:02 AM

Limited Time Offer

25%

Off

Get Premium 312-38 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rusty

3 days ago

POSH-Sysmon looks promising, but I hope it doesn't involve any actual sysmons. Those things give me the creeps!

upvoted 0 times

...

Leota

11 days ago

I agree with Paulina, POSH -Sysmon sounds like the right choice.

upvoted 0 times

...

Paulina

12 days ago

I think the answer is B) POSH -Sysmon.

upvoted 0 times

...

Jordan

13 days ago

MicroBurst sounds like a cool PowerShell script to protect the cloud. I wonder if it comes with a free microwave for heating up my lunch during break time?

upvoted 0 times

...