File Info
| Exam | Performing CyberOps Using Cisco Security Technologies |
| Number | 350-201 |
| File Name | Cisco.350-201.VCEplus.2021-01-25.87q.tqb |
| Size | 7 MB |
| Posted | Jan 25, 2021 |
| Download | Cisco.350-201.VCEplus.2021-01-25.87q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Refer to the exhibit. A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?
- Limit the number of API calls that a single client is allowed to make
- Add restrictions on the edge router on how often a single client can access the API
- Reduce the amount of data that can be fetched from the total pool of active clients that call the API
- Increase the application cache of the total pool of active clients that call the API
Correct answer: A
Question 2
A threat actor attacked an organization's Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial data, the session was disconnected, and the administrator's account was disabled. Which activity triggered the behavior analytics tool?
- accessing the Active Directory server
- accessing the server with financial data
- accessing multiple servers
- downloading more than 10 files
Correct answer: C
Question 3
Refer to the exhibit. A security analyst needs to investigate a security incident involving several suspicious connections with a possible attacker. Which tool should the analyst use to identify the source IP of the offender?
- packet sniffer
- malware analysis
- SIEM
- firewall manager
Correct answer: A
