200-201 Practice Questions

A.  

Rule-based are simple and easy to execute, and role-based are well-defined.

B.  

Role-based are an appropriate choice in geographically diverse workgroups, and rule-based are for simply structured workgroups.

C.  

Rule-based are less granular, and role-based have time constraints.

D.  

Role-based are efficient in small workgroups, and rule-based are preferred in time-defined workgroups.

A.  

An attack vector recognizes the potential outcomes of an attack, and the attack surface is choosing a method of an attack.

B.  

An attack surface identifies vulnerable parts for an attack, and an attack vector specifies which attacks are feasible to those parts.

C.  

An attack surface mitigates external vulnerabilities, and an attack vector identifies mitigation techniques and possible workarounds.

D.  

An attack vector matches components that can be exploited, and an attack surface classifies the potential path for exploitation

A.  

The traffic would have been monitored at any segment in the network.

B.  

Malicious traffic would have been blocked on multiple devices

C.  

An extra level of security would have been in place

D.  

Detailed information about the data in real time would have been provided

A.  

privilege escalation

B.  

DDoS attack

C.  

phishing

D.  

man-in-the-middle

E.  

pharming

A.  

A vulnerability is the risk of exploiting a weakness in the application, and the target application itself is the attack surface

B.  

The attack surface is the SQL injection targeted on the database, and the database is the vulnerability that might be exploited.

C.  

The attack surface is a sum of measured risks for a particular asset, and the vulnerability is an unmeasured exploitable risk

D.  

A vulnerability is unsanitized user input sent to exploit a web application and the browser is the attack surface for the web application

A.  

file timestamp

B.  

file extension

C.  

file size

D.  

file hash

A.  

src=10.11.0.0/16 and dst=10.11.0.0/16

B.  

ip.src==10.11.0.0/16 and ip.dst==10.11.0.0/16

C.  

ip.src=10.11.0.0/16 and ip.dst=10.11.0.0/16

D.  

src==10.11.0.0/16 and dst==10.11.0.0/16

A.  

obtaining disposed documents from an organization

B.  

using a vulnerability scanner on a corporate network

C.  

setting up a rogue access point near a public hotspot

D.  

impersonating a tech support agent during a phone call

A.  

the intellectual property that was stolen

B.  

the defense contractor who stored the intellectual property

C.  

the method used to conduct the attack

D.  

the foreign government that conducted the attack

A.  

Windows failed to audit the logs

B.  

regular Windows log

C.  

brute-force attack

D.  

DoS attack