200-201試験無料問題集「Cisco Understanding Cisco Cybersecurity Operations Fundamentals 認定」

A. MIME

B. tags

C. info

D. name

A. SQL injection

B. replay

C. cross-site scripting

D. dictionary

A. tcpdstat

B. trafdump

C. tcptrace

D. trafshow

A. sending a verbal request to an administrator who knows how to change an account password

B. receiving an email from human resources requesting a visit to their secure website to update contact information

C. receiving an unexpected email from an unknown person with an attachment from someone in the same company

D. receiving an invitation to the department's weekly WebEx meeting

A. A risk is a potential threat that an exploit applies to, and a vulnerability represents the threat itself

B. A risk is potential threat that adversaries use to infiltrate the network, and a vulnerability is an exploit

C. A vulnerability is a sum of possible malicious entry points, and a risk represents the possibility of the unauthorized entry itself.

D. A vulnerability represents a flaw in a security that can be exploited, and the risk is the potential damage it might cause.

A. a denied access attempt was made to retrieve the password file

B. a successful access attempt was made to retrieve the root of the website

C. an access attempt was made from the Mosaic web browser

D. a successful access attempt was made to retrieve the password file

A. data mining

B. rapid response

C. decision making

D. due diligence

A. The metric score will be larger when a remote attack is more likely.

B. It depends on how far away the attacker is located and the vulnerable component

C. It depends on how many physical and logical manipulations are possible on a vulnerable component

D. The metric score will be larger when it is easier to physically touch or manipulate the vulnerable component

A. SOAR collects and stores security data at a central point and then converts it into actionable intelligence, and SIEM enables SOC teams to automate and orchestrate manual tasks

B. SIEM combines data collecting, standardization, case management, and analytics for a defense-in-depth concept, and SOAR collects security data antivirus logs, firewall logs, and hashes of downloaded files

C. SIEM raises alerts in the event of detecting any suspicious activity, and SOAR automates investigation path workflows and reduces time spent on alerts

D. SOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

A. HTTP status code

B. TCP ACK

C. URI

D. destination IP address

A. The file is clean and does not represent a risk.

B. MD5 of the file was not identified as malicious.

C. Cuckoo cleaned the malicious file and prepared it for usage.

D. Win32.polip.a.exe is an executable file and should be flagged as malicious.

A. ARP cache poisoning

B. denial of service

C. DHCP snooping

D. command and control