최신 200-201 무료덤프 - Cisco Understanding Cisco Cybersecurity Operations Fundamentals

문제1

A threat actor penetrated an organization's network. Using the 5-tuple approach, which data points should the analyst use to isolate the compromised host in a grouped set of logs?

A. event name, log source, time, source IP, and username

B. protocol, log source, source IP, destination IP, and host name

C. event name, log source, time, source IP, and host name

D. protocol, source IP, source port, destination IP, and destination port

정답: D

문제2

Which event is a vishing attack?

A. obtaining disposed documents from an organization

B. impersonating a tech support agent during a phone call

C. setting up a rogue access point near a public hotspot

D. using a vulnerability scanner on a corporate network

정답: B

문제3

An engineer received a flood of phishing emails from HR with the source address HRjacobm@companycom. What is the threat actor in this scenario?

A. phishing email

B. HR

C. receiver

D. sender

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Which technology should be used to implement a solution that makes routing decisions based on HTTP header, uniform resource identifier, and SSL session ID attributes?

A. IIS

B. Load balancer

C. AWS

D. Proxy server

정답: B

설명: (DumpTOP 회원만 볼 수 있음)

문제5

Refer to the exhibit. A security analyst wraps up the shift and passed open ticket notes to the night shift SOC team analyst. The ticket name in QUESTION 5is "Investigating suspicious activity on a Windows Server".
Which operating system components must the analyst prioritize to uncover the attacker's persistence mechanisms?

A. Review the Windows Defender setup and failed login attempts in Event Viewer.

B. Focus on the user account log-ins and delete newly added Run keys in the registry.

C. Analyze the Windows Registry changes and Task Scheduler tasks.

D. Investigate the Task Scheduler entries and Windows Defender settings.

정답: C

설명: (DumpTOP 회원만 볼 수 있음)

문제6

Which type of data is used to monitor and detect anomalies within the organization's network?

A. metadata

B. statistical

C. transaction

D. alert

정답: B

문제7

According to CVSS, what is the attack vector?

A. set of steps taken by a threat actor before exploiting the vulnerability

B. process by which an attacker tries to exploit an existing vulnerability

C. practical demonstration of an attack to understand the required tools and resources

D. context by which vulnerability exploitation is achievable

정답: D

문제8

Which type of attack involves executing arbitrary commands on the operating system to escalate privileges?

A. Apache log

B. command injection

C. SQL injection

D. cross-site scripting

정답: B

문제9

A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property. What is the threat agent in this situation?

A. the method used to conduct the attack

B. the defense contractor who stored the intellectual property

C. the intellectual property that was stolen

D. the foreign government that conducted the attack

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

최신 200-201 무료덤프 - Cisco Understanding Cisco Cybersecurity Operations Fundamentals

우리와 연락하기

유용한 링크

최신 업데이트