Cisco CyberOps Associate 200-201 Questions & Answers

• Question 211:

  What is a description of a social engineering attack?

  A. fake offer for free music download to trick the user into providing sensitive data

  B. package deliberately sent to the wrong receiver to advertise a new product

  C. mistakenly received valuable order destined for another person and hidden on purpose

  D. email offering last-minute deals on various vacations around the world with a due date and a counter

  Correct Answer: D

• Question 212:

  Which piece of information is needed for attribution in an investigation?

  A. proxy logs showing the source RFC 1918 IP addresses

  B. RDP allowed from the Internet

  C. known threat actor behavior

  D. 802.1x RADIUS authentication pass arid fail logs

  Correct Answer: C

  Actually this is the most important thing: know who, what, how, why, etc..attack the network.

• Question 213:

  What does an attacker use to determine which network ports are listening on a potential target device?

  A. man-in-the-middle

  B. port scanning

  C. SQL injection

  D. ping sweep

  Correct Answer: B

• Question 214:

  What is personally identifiable information that must be safeguarded from unauthorized access?

  A. date of birth

  B. driver's license number

  C. gender

  D. zip code

  Correct Answer: B

  According to the Executive Office of the President, Office of Management and Budget (OMB), and the U.S. Department of Commerce, Office of the Chief Information Officer, PII refers to "information which can be used to distinguish or trace

  an individual's identity."

  The following are a few examples:

  -An individual's name

  -Social security number

  - Biological or personal characteristics, such as an image of distinguishing features, fingerprints, Xrays, voice signature, retina scan, and the geometry of the face

  -Date and place of birth

  -Mother's maiden name

  -Credit card numbers

  -Bank account numbers

  -Driver license number

  -

  Address information, such as email addresses or street addresses, and telephone numbers for businesses or personal use

  -

  Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide Omar Santos

• Question 215:

  Refer to the exhibit.

  

  What is occurring within the exhibit?

  A. regular GET requests

  B. XML External Entities attack

  C. insecure deserialization

  D. cross-site scripting attack

  Correct Answer: A

  Reference: https://www.tutorialspoint.com/http/http_requests.htm https://github.com/gwroblew/detectXSSlib/blob/master/test/attacks.txt

• Question 216:

  Refer to the exhibit.

  

  This request was sent to a web application server driven by a database. Which type of web server attack is represented?

  A. parameter manipulation

  B. heap memory corruption

  C. command injection

  D. blind SQL injection

  Correct Answer: D

• Question 217:

  Which type of verification consists of using tools to compute the message digest of the original and copied data, then comparing the similarity of the digests?

  A. evidence collection order

  B. data integrity

  C. data preservation

  D. volatile data collection

  Correct Answer: B

• Question 218:

  Which type of access control depends on the job function of the user?

  A. discretionary access control

  B. nondiscretionary access control

  C. role-based access control

  D. rule-based access control

  Correct Answer: C

• Question 219:

  An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?

  A. sequence numbers

  B. IP identifier

  C. 5-tuple

  D. timestamps

  Correct Answer: C

• Question 220:

  What is an incident response plan?

  A. an organizational approach to events that could lead to asset loss or disruption of operations

  B. an organizational approach to security management to ensure a service lifecycle and continuous improvements

  C. an organizational approach to disaster recovery and timely restoration of operational services

  D. an organizational approach to system backup and data archiving aligned to regulations

  Correct Answer: C