During which phase of the forensic process is data that is related to a specific event labeled and recorded to preserve its integrity?
Answer(s): C
Which step in the incident response process researches an attacking host through logs in a SIEM?
Answer(s): A
Preparation --> Detection and Analysis --> Containment, Erradicaion and Recovery --> Post-Incident Activity Detection and Analysis --> Profile networks and systems, Understand normal behaviors, Create a log retention policy, Perform event correlation. Maintain and use a knowledge base of information.Use Internet search engines for research. Run packet sniffers to collect additional data. Filter the data. Seek assistance from others. Keep all host clocks synchronized. Know the different types of attacks and attack vectors. Develop processes and procedures to recognize the signs of an incident. Understand the sources of precursors and indicators. Create appropriate incident documentation capabilities and processes. Create processes to effectively prioritize security incidents. Create processes to effectively communicate incident information (internal and external communications).Ref: Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide
A malicious file has been identified in a sandbox analysis tool.Which piece of information is needed to search for additional downloads of this file by other hosts?
Answer(s): D
Refer to the exhibit.What is the potential threat identified in this Stealthwatch dashboard?
Post your Comments and Discuss Cisco® 200-201 exam with other Community members:
AEB commented on December 11, 2024 The breadth of knowledge for this exam is large. It doesn't seem possible to learn everything on it for an associate level exam. UNITED STATES upvote
Bio commented on September 05, 2023 200-201 CBROPS 092023 - Exam still 75% to 80% valid. Suggest to those who wants to pass to study this, along with netacads, and review quizlets to ensure you pass. GERMANY upvote
AB commented on August 21, 2023 200-201 is still good. passed Aug 14 UNITED STATES upvote
Our website is free, but we have to fight against bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 200-201 content, but please register or login to continue.