200-201 Practice Questions

A.  

True positives affect security as no alarm is raised when an attack has taken place, resulting in a potential breach.

B.  

True positive alerts are blocked by mistake as potential attacks affecting application availability.

C.  

False positives affect security as no alarm is raised when an attack has taken place, resulting in a potential breach.

D.  

False positive alerts are blocked by mistake as potential attacks affecting application availability.

A.  

Behavioral systems find sequences that match particular attach behaviors, and rule-based systems identify potential zero-day attacks.

B.  

Rule-based systems search for patterns linked to specific types of attacks, and behavioral systems Identify attacks per signature.

C.  

Behavioral systems have patterns are for complex environments, and rule-based systems can be used on low-mid-sized businesses.

D.  

Rule-based systems have predefined patterns, and behavioral systems learn the patterns that are specific to the environment.

A.  

identify the minimum resource required per employee.

B.  

Assign the least network privileges to segment network permissions.

C.  

Provide the minimum permissions needed to perform Job functions.

D.  

Disable administrative accounts to avoid unauthorized changes.

A.  

Recovery

B.  

Detection

C.  

Eradication

D.  

Analysis

A.  

Rule-based detection involves the collection of data in relation to the behavior of legitimate users over a period of time

B.  

Statistical detection defines legitimate data of users over a period of time and rule-based detection defines it on an IF/THEN basis

C.  

Statistical detection involves the evaluation of an object on its intended actions before it executes that behavior

D.  

Rule-based detection defines legitimate data of users over a period of time and statistical detection defines it on an IF/THEN basis

A.  

decision making

B.  

rapid response

C.  

data mining

D.  

due diligence

A.  

extended sleep calls

B.  

encryption

C.  

resource exhaustion

D.  

encoding

A.  

by using the buffer overflow in the URL catcher feature for SSH

B.  

by using an SSH Tectia Server vulnerability to enable host-based authentication

C.  

by using an SSH vulnerability to silently redirect connections to the local host

D.  

by using brute force on the SSH service to gain access

A.  

Weaponization

B.  

Installation

C.  

Exploitation

D.  

Delivery

A.  

sandbox

B.  

application allow list

C.  

application block list

D.  

host-based firewall