2024 Realistic 200-201 Dumps Exam Tips Test Pdf Exam Material [Q11-Q30] : Actual Test Materials : http://blog.actualtests4sure.com

NO.11 A company encountered a breach on its web servers using IIS 7 5 Dunng the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1 2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?

Upgrade to TLS v1 3.

Install the latest IIS version.

Downgrade to TLS 1.1.

Deploy an intrusion detection system

NO.12 What is a scareware attack?

using the spoofed email addresses to trick people into providing login credentials

overwhelming a targeted website with fake traffic

gaming access to your computer and encrypting data stored on it

inserting malicious code that causes popup windows with flashing colors

NO.13 Refer to the exhibit.

A company employee is connecting to mail google.com from an endpoint device. The website is loaded but with an error. What is occurring?

DNS hijacking attack

Endpoint local time is invalid.

Certificate is not in trusted roots.

man-m-the-middle attack

NO.14 An analyst discovers that a legitimate security alert has been dismissed.
Which signature caused this impact on network traffic?

true negative

false negative

false positive

true positive

NO.15 Refer to the exhibit.

What is depicted in the exhibit?

Windows Event logs

Apache logs

IIS logs

UNIX-based syslog

NO.16 Refer to the exhibit.

Which type of log is displayed?

IDS

proxy

NetFlow

sys

NO.17 Why should an engineer use a full packet capture to investigate a security breach?

It captures the TCP flags set within each packet for the engineer to focus on suspicious packets to identify malicious activity

It collects metadata for the engineer to analyze, including IP traffic packet data that is sorted, parsed, and indexed.

It provides the full TCP streams for the engineer to follow the metadata to identify the incoming threat.

It reconstructs the event allowing the engineer to identify the root cause by seeing what took place during the breach

NO.18 What is the difference between a threat and an exploit?

A threat is a result of utilizing flow in a system, and an exploit is a result of gaining control over the system.

A threat is a potential attack on an asset and an exploit takes advantage of the vulnerability of the asset

An exploit is an attack vector, and a threat is a potential path the attack must go through.

An exploit is an attack path, and a threat represents a potential vulnerability

NO.19 Drag and drop the event term from the left onto the description on the right.

NO.20 What is personally identifiable information that must be safeguarded from unauthorized access?

date of birth

driver’s license number

gender

zip code

NO.21 What does cyber attribution identity in an investigation?

cause of an attack

exploit of an attack

vulnerabilities exploited

threat actors of an attack

NO.22 Drag and drop the security concept on the left onto the example of that concept on the right.

NO.23 What is the impact of false positive alerts on business compared to true positive?

True positives affect security as no alarm is raised when an attack has taken place, resulting in a potential breach.

True positive alerts are blocked by mistake as potential attacks affecting application availability.

False positives affect security as no alarm is raised when an attack has taken place, resulting in a potential breach.

False positive alerts are blocked by mistake as potential attacks affecting application availability.

NO.24 Which evasion technique is a function of ransomware?

extended sleep calls

encryption

resource exhaustion

encoding

NO.25 What describes the concept of data consistently and readily being accessible for legitimate users?

integrity

availability

accessibility

confidentiality

NO.26 Drag and drop the data source from the left onto the data type on the right.

NO.27 Which list identifies the information that the client sends to the server in the negotiation phase of the TLS handshake?

ClientStart, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

ClientStart, TLS versions it supports, cipher-suites it supports, and suggested compression methods

ClientHello, TLS versions it supports, cipher-suites it supports, and suggested compression methods

ClientHello, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

NO.28 Drag and drop the access control models from the left onto the correct descriptions on the right.

NO.29 Which are two denial-of-service attacks? (Choose two.)

TCP connections

ping of death

man-in-the-middle

code-red

UDP flooding

NO.30 What is threat hunting?

Managing a vulnerability assessment report to mitigate potential threats.

Focusing on proactively detecting possible signs of intrusion and compromise.

Pursuing competitors and adversaries to infiltrate their system to acquire intelligence data.

Attempting to deliberately disrupt servers by altering their availability

2024 Realistic 200-201 Dumps Exam Tips Test Pdf Exam Material [Q11-Q30]

What is the cost of Cisco Cybersecurity Operations Fundamentals v1.0 (200-201 CBROPS)

Certification Path for Cisco Cybersecurity Operations Fundamentals v1.0 (200-201 CBROPS)