QUESTION: 77

What are two denial of service attacks? (Choose two.)

MITM
TCP connections
ping of death
UDP flooding
code red

Answer(s): C,D

QUESTION: 78

An engineer needs to discover alive hosts within the 192.168.1.0/24 range without triggering intrusive portscan alerts on the IDS device using Nmap.
Which command will accomplish this goal?

nmap --top-ports 192.168.1.0/24
nmap sP 192.168.1.0/24
nmap -sL 192.168.1.0/24
nmap -sV 192.168.1.0/24

Answer(s): B

Reference:

https://explainshell.com/explain?cmd=nmap+-sP

Reveal Solution Next Question

An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture, the analyst cannot determine the technique and payload used for the communication.

Which obfuscation technique is the attacker using?

Base64 encoding
TLS encryption
SHA-256 hashing
ROT13 encryption

Answer(s): B

Explanation:

ROT13 is considered weak encryption and is not used with TLS (HTTPS:443).

Reference:

https://en.wikipedia.org/wiki/ROT13

Reveal Solution Next Question

QUESTION: 80

What are two differences in how tampered and untampered disk images affect a security incident? (Choose two.)

Untampered images are used in the security investigation process
Tampered images are used in the security investigation process
The image is tampered if the stored hash and the computed hash match
Tampered images are used in the incident recovery process
The image is untampered if the stored hash and the computed hash match

Answer(s): A,E

Explanation:

Cert Guide by Omar Santos, Chapter 9 - Introduction to digital Forensics. "When you collect evidence, you must protect its integrity. This involves making sure that nothing is added to the evidence and that nothing is deleted or destroyed (this is known as evidence preservation)."

Reveal Solution Next Question

Free 200-201 Exam Braindumps (page: 21)

QUESTION: 77

QUESTION: 78

Reference:

QUESTION: 79

Explanation:

Reference:

QUESTION: 80

Explanation:

Exam Discussions & Posts