Unique Top-selling 200-201 Exams - New 2021 Cisco Pratice Exam
CyberOps Associate Dumps 200-201 Exam for Full Questions - Exam Study Guide
NEW QUESTION 49
One of the objectives of information security is to protect the CIA of information and systems.
What does CIA mean in this context?
- A. confidentiality, identity, and availability
- B. confidentiality, identity, and authorization
- C. confidentiality, integrity, and authorization
- D. confidentiality, integrity, and availability
Answer: D
NEW QUESTION 50
What are two denial of service attacks? (Choose two.)
- A. MITM
- B. ping of death
- C. UDP flooding
- D. TCP connections
- E. code red
Answer: B,C
NEW QUESTION 51
What is personally identifiable information that must be safeguarded from unauthorized access?
- A. gender
- B. date of birth
- C. driver's license number
- D. zip code
Answer: C
NEW QUESTION 52
Which system monitors local system operation and local network access for violations of a security policy?
- A. host-based firewall
- B. antivirus
- C. host-based intrusion detection
- D. systems-based sandboxing
Answer: C
Explanation:
Explanation
HIDS is capable of monitoring the internals of a computing system as well as the network packets on its network interfaces. Host-based firewall is a piece of software running on a single Host that can restrict incoming and outgoing Network activity for that host only.
NEW QUESTION 53
Which incidence response step includes identifying all hosts affected by an attack?
- A. preparation
- B. post-incident activity
- C. containment, eradication, and recovery
- D. detection and analysis
Answer: C
Explanation:
Section: Security Policies and Procedures
NEW QUESTION 54
What are two differences in how tampered and untampered disk images affect a security incident? (Choose two.)
- A. Tampered images are used in the incident recovery process
- B. Untampered images are used in the security investigation process
- C. Tampered images are used in the security investigation process
- D. The image is tampered if the stored hash and the computed hash match
- E. The image is untampered if the stored hash and the computed hash match
Answer: B,E
NEW QUESTION 55
How does a certificate authority impact security?
- A. It validates client identity when communicating with the server.
- B. It authenticates client identity when requesting an SSL certificate.
- C. It validates the domain identity of the SSL certificate.
- D. It authenticates domain identity when requesting an SSL certificate.
Answer: C
NEW QUESTION 56
An engineer needs to discover alive hosts within the 192.168.1.0/24 range without triggering intrusive portscan alerts on the IDS device using Nmap. Which command will accomplish this goal?
- A. nmap --top-ports 192.168.1.0/24
- B. nmap -sP 192.168.1.0/24
- C. nmap -sV 192.168.1.0/24
- D. nmap -sL 192.168.1.0/24
Answer: D
NEW QUESTION 57
A system administrator is ensuring that specific registry information is accurate.
Which type of configuration information does the HKEY_LOCAL_MACHINE hive contain?
- A. hardware, software, and security settings for the system
- B. currently logged in users, including folders and control panel settings
- C. file extension associations
- D. all users on the system, including visual settings
Answer: A
NEW QUESTION 58
What causes events on a Windows system to show Event Code 4625 in the log messages?
- A. Another device is gaining root access to the system
- B. The system detected an XSS attack
- C. Someone is trying a brute force attack on the network
- D. A privileged user successfully logged into the system
Answer: C
NEW QUESTION 59
Drag and drop the technology on the left onto the data type the technology provides on the right.
Answer:
Explanation:
NEW QUESTION 60
Which type of evidence supports a theory or an assumption that results from initial evidence?
- A. indirect
- B. best
- C. probabilistic
- D. corroborative
Answer: D
Explanation:
Section: Security Policies and Procedures
NEW QUESTION 61
Drag and drop the technology on the left onto the data type the technology provides on the right.
Answer:
Explanation:
NEW QUESTION 62
Refer to the exhibit.
Which two elements in the table are parts of the 5-tuple? (Choose two.)
- A. First Packet
- B. Ingress Security Zone
- C. Initiator User
- D. Initiator IP
- E. Source Port
Answer: D,E
NEW QUESTION 63
Refer to the exhibit.
Which two elements in the table are parts of the 5-tuple? (Choose two.)
- A. First Packet
- B. Ingress Security Zone
- C. Initiator User
- D. Initiator IP
- E. Source Port
Answer: D,E
NEW QUESTION 64
Which technology should be used to implement a solution that makes routing decisions based on HTTP header, uniform resource identifier, and SSL session ID attributes?
- A. Proxy server
- B. Load balancer
- C. IIS
- D. AWS
Answer: C
NEW QUESTION 65
An analyst received an alert on their desktop computer showing that an attack was successful on the host. After investigating, the analyst discovered that no mitigation action occurred during the attack. What is the reason for this discrepancy?
- A. The computer has a NIPS installed on it.
- B. The computer has a HIPS installed on it.
- C. The computer has a HIDS installed on it.
- D. The computer has a NIDS installed on it.
Answer: C
NEW QUESTION 66 
Refer to the exhibit. Which type of log is displayed?
- A. proxy
- B. NetFlow
- C. IDS
- D. sys
Answer: D
NEW QUESTION 67
Which security principle is violated by running all processes as root or administrator?
- A. trusted computing base
- B. principle of least privilege
- C. role-based access control
- D. separation of duties
Answer: B
Explanation:
Section: Security Concepts
NEW QUESTION 68
......
Best way to practice test for Cisco 200-201: https://www.actual4labs.com/Cisco/200-201-actual-exam-dumps.html
200-201 Dump Ready - Exam Questions and Answers: https://drive.google.com/open?id=1NkRB0UfFENAZa6g-Foo7IpfAyXd8bpNv