최신 200-201 무료덤프 - Cisco Understanding Cisco Cybersecurity Operations Fundamentals
A system administrator is ensuring that specific registry information is accurate.
Which type of configuration information does the HKEY_LOCAL_MACHINE hive contain?
Which type of configuration information does the HKEY_LOCAL_MACHINE hive contain?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)
An engineer is working with the compliance teams to identify the data passing through the network. During analysis, the engineer informs the compliance team that external penmeter data flows contain records, writings, and artwork Internal segregated network flows contain the customer choices by gender, addresses, and product preferences by age. The engineer must identify protected data. Which two types of data must be identified'? (Choose two.)
정답: A,B
설명: (DumpTOP 회원만 볼 수 있음)
How can TOR impact data visibility inside an organization?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
What is the dataflow set in the NetFlow flow-record format?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
Which security model assumes an attacker within and outside of the network and enforces strict verification before connecting to any system or resource within the organization?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
Which evasion method involves performing actions slower than normal to prevent detection?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.
정답:
Explanation:
Delivery: This step involves transmitting the weapon to the target.
Weaponization: In this step, the intruder creates a malware weapon like a virus, worm or such in order to exploit the vulnerabilities of the target. Depending on the target and thepurpose of the attacker, this malware can exploit new, undetected vulnerabilities (also known as the zero-day exploits) or it can focus on a combination of different vulnerabilities.
Reconnaissance: In this step, the attacker / intruder chooses their target. Then they conduct an in-depth research on this target to identify its vulnerabilities that can be exploited.
A large load of data is being transferred to an external destination via UDP 53 port. Which obfuscation technique is used?
정답: D
An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?
정답: A
Which type of evasion technique is accomplished by separating the traffic into smaller segments before transmitting across the network?
정답: A
What is the difference between vulnerability and risk?
정답: B
설명: (DumpTOP 회원만 볼 수 있음)
An engineer needs to discover alive hosts within the 192.168.1.0/24 range without triggering intrusive portscan alerts on the IDS device using Nmap. Which command will accomplish this goal?
정답: D
설명: (DumpTOP 회원만 볼 수 있음)
What describes the impact of false-positive alerts compared to false-negative alerts?
정답: A
설명: (DumpTOP 회원만 볼 수 있음)
Refer to the exhibit.
A security analyst is investigating unusual activity from an unknown IP address Which type of evidence is this file1?
A security analyst is investigating unusual activity from an unknown IP address Which type of evidence is this file1?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)
What is a difference between inline traffic interrogation and traffic mirroring?
정답: C
설명: (DumpTOP 회원만 볼 수 있음)