Free Download 350-201 Examp Dump: Cisco.350-201.VCEplus.2021-01-25.87q.vcex

File Info

Exam	Performing CyberOps Using Cisco Security Technologies
Number	350-201
File Name	Cisco.350-201.VCEplus.2021-01-25.87q.vcex
Size	6 MB
Posted	Jan 25, 2021
Download	Cisco.350-201.VCEplus.2021-01-25.87q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase

Coupon: MASTEREXAM
With discount: 20%

Demo Questions

Question 1

Refer to the exhibit. A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?

Limit the number of API calls that a single client is allowed to make
Add restrictions on the edge router on how often a single client can access the API
Reduce the amount of data that can be fetched from the total pool of active clients that call the API
Increase the application cache of the total pool of active clients that call the API

Correct answer: A

Question 2

A threat actor attacked an organization's Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial data, the session was disconnected, and the administrator's account was disabled. Which activity triggered the behavior analytics tool?

accessing the Active Directory server
accessing the server with financial data
accessing multiple servers
downloading more than 10 files

Correct answer: C

Question 3

Refer to the exhibit. A security analyst needs to investigate a security incident involving several suspicious connections with a possible attacker. Which tool should the analyst use to identify the source IP of the offender?

packet sniffer
malware analysis
SIEM
firewall manager

Correct answer: A

Question 4

Refer to the exhibit. Cisco Advanced Malware Protection installed on an end-user desktop has automatically submitted a low prevalence file to the Threat Grid analysis engine for further analysis. What should be concluded from this report?

The prioritized behavioral indicators of compromise do not justify the execution of the "ransomware" because the scores do not indicate the likelihood of malicious ransomware.
The prioritized behavioral indicators of compromise do not justify the execution of the "ransomware" because the scores are high and do not indicate the likelihood of malicious ransomware.
The prioritized behavioral indicators of compromise justify the execution of the "ransomware" because the scores are high and indicate the likelihood that malicious ransomware has been detected.
The prioritized behavioral indicators of compromise justify the execution of the "ransomware" because the scores are low and indicate the likelihood that malicious ransomware has been detected.

Correct answer: C

Question 5

The physical security department received a report that an unauthorized person followed an authorized individual to enter a secured premise. The incident was documented and given to a security specialist to analyze. Which step should be taken at this stage?

Determine the assets to which the attacker has access
Identify assets the attacker handled or acquired
Change access controls to high risk assets in the enterprise
Identify movement of the attacker in the enterprise

Correct answer: D

Question 6

A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)

incident response playbooks
asset vulnerability assessment
report of staff members with asset relations
key assets and executives
malware analysis report

Correct answer: BE

Explanation:

Reference: https://cloudogre.com/risk-assessment/

Question 7

Refer to the exhibit. At which stage of the threat kill chain is an attacker, based on these URIs of inbound web requests from known malicious Internet scanners?

exploitation
actions on objectives
delivery
reconnaissance

Correct answer: C

Explanation:

Reference: https://www2.deloitte.com/content/dam/Deloitte/sg/Documents/risk/sea-risk-cyber-101-july2017.pdf

Question 8

Refer to the exhibit. How must these advisories be prioritized for handling?

The highest priority for handling depends on the type of institution deploying the devices
Vulnerability #2 is the highest priority for every type of institution
Vulnerability #1 and vulnerability #2 have the same priority
Vulnerability #1 is the highest priority for every type of institution

Correct answer: D

Question 9