200-201 Practice Questions

A.  

Browsing history is erased automatically with every session.

B.  

The protocol of the sending host adds additional data to the packet header.

C.  

Data is encrypted backwards, which makes it unusable.

D.  

Multiple hosts can be supported with only a few public IP addresses.

A.  

device or software that detects and blocks suspicious files

B.  

endpoint protection software that prevents viruses and malware

C.  

forensic tool used to perform an in-depth analysis and debugging

D.  

software or device which monitors and identifies malicious network activity

A.  

Tapping interrogation replicates signals to a separate port for analyzing traffic

B.  

Tapping interrogations detect and block malicious traffic

C.  

Inline interrogation enables viewing a copy of traffic to ensure traffic is in compliance with security policies

D.  

Inline interrogation detects malicious traffic but does not block the traffic

A.  

The file will appear legitimate by evading signature-based detection.

B.  

The file will not execute its behavior in a sandbox environment to avoid detection.

C.  

The file will insert itself into an application and execute when the application is run.

D.  

The file will monitor user activity and send the information to an outside source.

A.  

reconnaissance

B.  

delivery

C.  

weaponization

D.  

exploitation

A.  

The average time the SOC takes to register and assign the incident.

B.  

The total incident escalations per week.

C.  

The average time the SOC takes to detect and resolve the incident.

D.  

The total incident escalations per month.

A.  

list of security restrictions and privileges boundaries bypassed

B.  

external USB device

C.  

receptionist and the actions performed

D.  

stolen data and its criticality assessment

A.  

information disclosure

B.  

buffer overflow

C.  

denial of service

D.  

command injection

A.  

Isolate the infected endpoint from the network.

B.  

Perform forensics analysis on the infected endpoint.

C.  

Collect public information on the malware behavior.

D.  

Prioritize incident handling based on the impact.

A.  

A remote threat performs an EternalBlue attack on a Windows system on several ports.

B.  

An inside threat performs an EternalBlue attack on hosts 192.168.2.101 and 192.168.200.10 on port 445.

C.  

A remote threat performs an EternalBlue attack on several hosts and different ports.

D.  

An inside threat performs an EternalBlue attack on a Windows system on port 445.