PDF 350-201 Study Guide

The STIX (Structured Threat Information eXpression) object in the exhibit indicates that the compromise involves a website hosting malware, which is designed to download files onto a user’s system without their knowledge. This type of indicator is commonly associated with drive-by download attacks, where visiting a website can result in the automatic download and execution of malware. The STIX object would contain information about the malicious URLs, file hashes, and other relevant indicators that can be used to detect and prevent such threats.

Hardening machine images for deployment reduces the attack surface by eliminating unnecessary services, closing open network ports, removing unused software, and applying security configurations. This process minimizes the number of potential vulnerabilities that can be exploited by attackers3.

A European-based advertisement company that collects tracking information from partner websites must adhere to the General Data Protection Regulation (GDPR). GDPR is the standard that governs data protection and privacy in the European Union and the European Economic Area. It provides guidelines on how personal data should be collected, processed, and stored, ensuring that individuals’ data is protected and that companies are transparent about their data handling practices

To comply with PCI standards for hardening systems, especially for an e-commerce website with multiple points of sale, it is essential to encrypt personal data. This includes any information that can be used to identify an individual, such as names, addresses, and credit card numbers. Encryption helps protect this data during transmission and storage, reducing the risk of unauthorized access and data breaches2.