200-201 Practice Questions

A.  

Biba

B.  

Object-capability

C.  

Take-Grant

D.  

Zero Trust

A.  

defining precise guidelines for new workstation installations

B.  

categorizing critical assets within the organization

C.  

isolating guest Wi-Fi from the focal network

D.  

implementing alerts for unexpected asset malfunctions

A.  

A true negative is a legitimate attack that triggers a brute force alert, and a false negative is when no alert and no attack is occurring.

B.  

A true negative is an alert for an exploit attempt when no attack was detected, and a false negative is when no attack happens and an alert is still raised.

C.  

A false negative is an event that alerts for injection attack when no attack is happening, and a true negative is an attack that happens and an alert that is appropriately raised.

D.  

A false negative is someone trying to hack into the system and no alert is raised, and a true negative is an event that never happened and an alert was not raised.

A.  

Firepower

B.  

Email Security Appliance

C.  

Web Security Appliance

D.  

Stealthwatch

A.  

scanning servers and workstations for missing patches and vulnerabilities

B.  

managing and keeping previous patches lists documented for audit purposes

C.  

process of appropriate distribution of system or software updates

D.  

workflow of distributing mitigations of newly found vulnerabilities

A.  

proxy

B.  

antivirus

C.  

IPS

D.  

firewall

A.  

Delete the data immediately to comply with all global privacy regulations.

B.  

Retain the data, as a customer ID by itself does not qualify as PSI under international standards.

C.  

Consult the legal team, as customer IDs are always considered PSI and cannot be retained.

D.  

Delete the data if the customer ID is stored alongside additional information that can identify the client.

A.  

proxied traffic

B.  

C&C connection

C.  

data masking

D.  

DNS tunneling

A.  

Nagios

B.  

CAINE

C.  

Hydra

D.  

Wireshark

A.  

An attack surface is a way of taking advantage of a system or resource, and a vulnerability is a specific technique utilized by the vulnerability.

B.  

A vulnerability describes how software or a system is exposed to potential attacks, and an attack surface is an actual weakness that exposes the potential risk.

C.  

A vulnerability is a way of taking advantage of a system or resource, and an attack surface is a specific technique utilized by the vulnerability.

D.  

An attack surface describes how software or a system is exposed to potential attacks, and a vulnerability is an actual weakness that exposes the potential risk.