File Info
| Exam | Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) |
| Number | 200-201 |
| File Name | Cisco.200-201.VCEplus.2020-07-01.98q.vcex |
| Size | 4 MB |
| Posted | Jul 01, 2020 |
| Download | Cisco.200-201.VCEplus.2020-07-01.98q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
While viewing packet capture data, an analyst sees that one IP is sending and receiving traffic for multiple devices by modifying the IP header.
Which technology makes this behavior possible?
- encapsulation
- TOR
- tunneling
- NAT
Correct answer: D
Question 2
When communicating via TLS, the client initiates the handshake to the server and the server responds back with its certificate for identification.
Which information is available on the server certificate?
- server name, trusted subordinate CA, and private key
- trusted subordinate CA, public key, and cipher suites
- trusted CA name, cipher suites, and private key
- server name, trusted CA, and public key
Correct answer: D
Question 3
A security engineer has a video of a suspect entering a data center that was captured on the same day that files in the same data center were transferred to a competitor.
Which type of evidence is this?
- best evidence
- prima facie evidence
- indirect evidence
- physical evidence
Correct answer: C
Question 4
Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)
- detection and analysis
- post-incident activity
- vulnerability management
- risk assessment
- vulnerability scoring
Correct answer: AB
Explanation:
Reference: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf Reference: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Question 5
Which utility blocks a host portscan?
- HIDS
- sandboxing
- host-based firewall
- antimalware
Correct answer: C
Question 6
Which event is user interaction?
- gaining root access
- executing remote code
- reading and writing file permission
- opening a malicious file
Correct answer: D
Question 7
An intruder attempted malicious activity and exchanged emails with a user and received corporate information, including email distribution lists. The intruder asked the user to engage with a link in an email. When the fink launched, it infected machines and the intruder was able to access the corporate network.
Which testing method did the intruder use?
- social engineering
- eavesdropping
- piggybacking
- tailgating
Correct answer: A
Question 8
Refer to the exhibit. What information is depicted?
- IIS data
- NetFlow data
- network discovery event
- IPS event data
Correct answer: B
Question 9
Which type of evidence supports a theory or an assumption that results from initial evidence?
- probabilistic
- indirect
- best
- corroborative
Correct answer: D
Question 10
Which two elements are assets in the role of attribution in an investigation? (Choose two.)
- context
- session
- laptop
- firewall logs
- threat actor
Correct answer: AE
