200-201 Practice Questions

A.  

transaction data

B.  

session data

C.  

alert data

D.  

statistical data

A.  

existing exploits available in the wild exploiting the vulnerability

B.  

existing circumstances beyond the attacker's control to exploit the vulnerability

C.  

number of actions an attacker should perform to exploit the vulnerability

D.  

number of patches available for certain attack mitigation and how complex the workarounds are

A.  

employee 5

B.  

employee 3

C.  

employee 4

D.  

employee 2

A.  

A HIDS protects against threats via known denylisted hash databases of malware and ransomware.

B.  

A HIDS filters traffic according to configured firewall access control rules.

C.  

A HIDS detects threats using a combination of signature-based and anomaly-based detection methods.

D.  

A HIDS blocks potential anomalous user activity.

A.  

NAT

B.  

tap

C.  

SPAN ports

D.  

tunneling

A.  

It is a component of a malware attack used to establish a remote covert channel.

B.  

It is malicious software that steals confidential data.

C.  

It encrypts a victim’s data and prevents access to it.

D.  

The volume of data exceeds storage capacity.

A.  

It enumerates open ports on a network device

B.  

It drops secondary payload into malware

C.  

It is used to regain control of the network after a compromise

D.  

It sends instruction to a compromised system

A.  

NetFlow collects metadata and traffic mirroring clones data.

B.  

Traffic mirroring impacts switch performance and NetFlow does not.

C.  

Traffic mirroring costs less to operate than NetFlow.

D.  

NetFlow generates more data than traffic mirroring.

A.  

cause of an attack

B.  

exploit of an attack

C.  

vulnerabilities exploited

D.  

threat actors of an attack

A.  

detection and analysis

B.  

preparation

C.  

eradication

D.  

containment