最新的Cisco 200-201免費考試真題

問題1

Which two attacks are denial-of-service (DoS) attacks? (Choose two.)

A. man-in-the-middle

B. TCP connections

C. UDP flooding

D. ping of death

E. Code Red

正確答案: C,D

說明：（僅 Fast2test 成員可見）

問題2

Refer to the exhibit.

This request was sent to a web application server driven by a database. Which type of web server attack is represented?

A. parameter manipulation

B. command injection

C. blind SQL injection

D. heap memory corruption

正確答案: C

問題3

What is a difference between rule-based and role-based access control mechanisms?

A. Rule-based are simple and easy to execute, and role-based are well-defined.

B. Role-based are an appropriate choice in geographically diverse workgroups, and rule-based are for simply structured workgroups.

C. Role-based are efficient in small workgroups, and rule-based are preferred in time-defined workgroups.

D. Rule-based are less granular, and role-based have time constraints.

正確答案: B

問題4

Which security technology allows only a set of pre-approved applications to run on a system?

A. antivirus

B. host-based IPS

C. application-level blacklisting

D. application-level whitelisting

正確答案: D

說明：（僅 Fast2test 成員可見）

問題5

A software development company develops high-end technology for the customer that will go through the HIPAA audit program. The technology will be hosted in the cloud, and the healthcare, employee names, and contact information will be stored on two separate logically isolated private cloud services. The patents and inventions will be hosted on a separate encrypted database. A compliance team is asked to analyze the cloud infrastructure and architecture to identify the protected data. Which two types of protected data should be identified? (Choose two.)

A. Federated Identity ID (FII)

B. Self-sovereign Identity (SSI)

C. Protected Health Information (PHI)

D. Payment Card Industry (PCI)

E. Personally Identifiable Information (PII)

正確答案: C,E

問題6

What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?

A. integrity validation

B. least privilege

C. due diligence

D. need to know

正確答案: B

說明：（僅 Fast2test 成員可見）

問題7

What is a difference between a threat and a vulnerability?

A. A vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

B. A threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.

C. A vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

D. A threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

正確答案: D

問題8

What is an attack surface as compared to a vulnerability?

A. the sum of all paths for data into and out of the environment

B. any potential danger to an asset

C. an exploitable weakness in a system or its design

D. the individuals who perform an attack

正確答案: A

說明：（僅 Fast2test 成員可見）

問題9

Which process is used when IPS events are removed to improve data integrity?

A. data signature

B. data availability

C. data protection

D. data normalization

正確答案: D

問題10

Refer to the exhibit.

Which packet contains a file that is extractable within Wireshark?

A. 2317

B. 2318

C. 2542

D. 1986

正確答案: B

說明：（僅 Fast2test 成員可見）

最新的Cisco Understanding Cisco Cybersecurity Operations Fundamentals - 200-201免費考試真題

聯系我們

站內鏈接

最新更新