Cisco CyberOps Associate 200-201 Questions & Answers

• Question 231:

  A system administrator is ensuring that specific registry information is accurate.

  Which type of configuration information does the HKEY_LOCAL_MACHINE hive contain?

  A. file extension associations

  B. hardware, software, and security settings for the system

  C. currently logged in users, including folders and control panel settings

  D. all users on the system, including visual settings

  Correct Answer: B

  https://docs.microsoft.com/en-us/troubleshoot/windows-server/performance/windows- registry-advanced-users

• Question 232:

  Which regular expression matches "color" and "colour"?

  A. colo?ur

  B. col[08]+our

  C. colou?r

  D. col[09]+our

  Correct Answer: C

• Question 233:

  At a company party a guest asks questions about the company's user account format and password complexity. How is this type of conversation classified?

  A. Phishing attack

  B. Password Revelation Strategy

  C. Piggybacking

  D. Social Engineering

  Correct Answer: D

• Question 234:

  Why is encryption challenging to security monitoring?

  A. Encryption analysis is used by attackers to monitor VPN tunnels.

  B. Encryption is used by threat actors as a method of evasion and obfuscation.

  C. Encryption introduces additional processing requirements by the CPU.

  D. Encryption introduces larger packet sizes to analyze and store.

  Correct Answer: B

• Question 235:

  A security incident occurred with the potential of impacting business services. Who performs the attack?

  A. malware author

  B. threat actor

  C. bug bounty hunter

  D. direct competitor

  Correct Answer: B

  Reference: https://www.paubox.com/blog/what-is-threat- actor/#:~:text=The%20term%20threat%20actor%20refers,CTA)%20when%20referencing%20cybersecurity%20issues

• Question 236:

  Which security model assumes an attacker within and outside of the network and enforces strict verification before connecting to any system or resource within the organization?

  A. Biba

  B. Object-capability

  C. Take-Grant

  D. Zero Trust

  Correct Answer: D

  Zero Trust security is an IT security model that requires strict identity verification for every person and device trying to access resources on a private network, regardless of whether they are sitting within or outside of the network perimeter.

• Question 237:

  What is the difference between indicator of attack (loA) and indicators of compromise (loC)?

  A. loA is the evidence that a security breach has occurred, and loC allows organizations to act before the vulnerability can be exploited.

  B. loA refers to the individual responsible for the security breach, and loC refers to the resulting loss.

  C. loC is the evidence that a security breach has occurred, and loA allows organizations to act before the vulnerability can be exploited.

  D. loC refers to the individual responsible for the security breach, and loA refers to the resulting loss.

  Correct Answer: C

• Question 238:

  What is the difference between a threat and a risk?

  A. Threat represents a potential danger that could take advantage of a weakness in a system

  B. Risk represents the known and identified loss or danger in the system

  C. Risk represents the nonintentional interaction with uncertainty in the system

  D. Threat represents a state of being exposed to an attack or a compromise, either physically or logically.

  Correct Answer: A

  A threat is any potential danger to an asset. If a vulnerability exists but has not yet been exploited--or, more importantly, it is not yet publicly known--the threat is latent and not yet realized.

• Question 239:

  When trying to evade IDS/IPS devices, which mechanism allows the user to make the data incomprehensible without a specific key, certificate, or password?

  A. fragmentation

  B. pivoting

  C. encryption

  D. stenography

  Correct Answer: C

  https://techdifferences.com/difference-between-steganography-and-cryptography.html#:~:text=The%20steganography%20and%20cryptography%20are,the%2 0structure%20of%20the%20message.

• Question 240:

  What is the difference between deep packet inspection and stateful inspection?

  A. Deep packet inspection gives insights up to Layer 7, and stateful inspection gives insights only up to Layer 4.

  B. Deep packet inspection is more secure due to its complex signatures, and stateful inspection requires less human intervention.

  C. Stateful inspection is more secure due to its complex signatures, and deep packet inspection requires less human intervention.

  D. Stateful inspection verifies data at the transport layer and deep packet inspection verifies data at the application layer

  Correct Answer: A