最新的Cisco 200-201免費考試真題

問題1

The target web application server is running as the root user and is vulnerable to command injection. Which result of a successful attack is true?

A. buffer overflow

B. privilege escalation

C. cross-site scripting

D. cross-site scripting request forgery

正確答案: D

問題2

What is the role of indicator of compromise in an investigation?

A. It identifies potentially malicious activity on a system or network.

B. It describes what and why something happened.

C. It is nonforensic data, which is easy to detect.

D. It helps answer the question of why the attack took place.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

What is corroborating evidence?

A. Evidence that tends to support a theory or an assumption deduced by some initial evidence

B. Evidence that can be provided to cyber police for further restrictive actions over threat actors

C. Evidence that relies on an extrapolation to a conclusion of fact, such as fingerprints

D. Evidence that can be presented in court in the original form, such as an exact copy of a hard drive

正確答案: A

說明：（僅 Fast2test 成員可見）

問題4

According to the NIST SP 800-86, which two types of data are considered volatile? (Choose two.)

A. free space

B. temporary files

C. dump files

D. swap files

E. login sessions

正確答案: D,E

說明：（僅 Fast2test 成員可見）

問題5

Refer to the exhibit. An attacker gained initial access to the company's network and ran an Nmap scan to advance with the lateral movement technique and to search the sensitive data. Which two elements can an attacker identify from the scan? (Choose two.)

A. workload and the configuration details

B. functionality and purpose of the server

C. user accounts and SID

D. number of users and requests that the server is handling

E. running services

正確答案: B,E

問題6

A CMS plugin creates two files that are accessible from the Internet: myplugin.html and exploitable.php. A newly discovered exploit takes advantage of an injection vulnerability in exploitable.php. To exploit the vulnerability, an HTTP POST must be sent with specific variables to exploitable.php. A security engineer notices traffic to the webserver that consists of only HTTP GET requests to myplugin.html. Which category does this activity fall under?

A. weaponization

B. exploitation

C. installation

D. reconnaissance

正確答案: D

問題7

Refer to the exhibit. What is occurring?

A. ARP poisoning

B. denial of service

C. Brute force attack

D. DNS amplification attack

正確答案: C

說明：（僅 Fast2test 成員可見）

問題8

An engineer must analyze a security event from last month. The engineer has access to a .pcap file collected from traffic mirroring and NetFlow data. The engineer must perform checks quickly on a busy network segment without knowing details.
Which source of data must be used for analysis?

A. NetFlow because it has all needed data

B. both sources, first .pcap based on a simple query, then NetFlow

C. .pcap file because it is easy to track all activity for the last month

D. both sources, first NetFlow because collection is easy, then .pcap

正確答案: D

說明：（僅 Fast2test 成員可見）

問題9

Why should an engineer use a full packet capture to investigate a security breach?

A. It provides the full TCP streams for the engineer to follow the metadata to identify the incoming threat.

B. It reconstructs the event allowing the engineer to identify the root cause by seeing what took place during the breach.

C. It collects metadata for the engineer to analyze, including IP traffic packet data that is sorted, parsed, and indexed.

D. It captures the TCP flags set within each packet for the engineer to focus on suspicious packets to identify malicious activity.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題10

What is an advantage of symmetric over asymmetric encryption?

A. A key is generated on demand according to data type.

B. It is suited for transmitting large amounts of data.

C. A one-time encryption key is generated for data transmission

D. It is a faster encryption mechanism for sessions

正確答案: D

說明：（僅 Fast2test 成員可見）

問題11

What is data encapsulation?

A. A protocol of the sending host adds additional data to the packet header.

B. Data is encrypted backwards, which makes it unusable.

C. Browsing history is erased automatically with every session.

D. Multiple hosts can be supported with only a few public IP addresses.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題12

How is attacking a vulnerability categorized?

A. delivery

B. action on objectives

C. exploitation

D. installation

正確答案: C

說明：（僅 Fast2test 成員可見）

問題13

What is the difference between attack surface and vulnerability?

A. A vulnerability is a way of taking advantage of a system or resource, and an attack surface is a specific technique utilized by the vulnerability.

B. An attack surface is a way of taking advantage of a system or resource, and a vulnerability is a specific technique utilized by the vulnerability.

C. An attack surface describes how software or a system is exposed to potential attacks, and a vulnerability is an actual weakness that exposes the potential risk.

D. A vulnerability describes how software or a system is exposed to potential attacks, and an attack surface is an actual weakness that exposes the potential risk.

正確答案: C

說明：（僅 Fast2test 成員可見）

問題14

A SOC analyst observed Ursnif malware at the SIEM dashboard. The analyst opened the PCAP file to search the certificate issue data. Where must the analyst navigate?

A. under the validity line

B. under the rdnSequence line

C. under the signed certificate

D. under the subject

正確答案: A

最新的Cisco Understanding Cisco Cybersecurity Operations Fundamentals - 200-201免費考試真題

聯系我們

站內鏈接

最新更新