Free 200-201 Exam Braindumps (page: 25)

Page 25 of 66

Refer to the exhibit.



This request was sent to a web application server driven by a database.
Which type of web server attack is represented?

  1. parameter manipulation
  2. heap memory corruption
  3. command injection
  4. blind SQL injection

Answer(s): D



A SOC analyst is investigating an incident that involves a Linux system that is identifying specific sessions.
Which identifier tracks an active program?

  1. application identification number
  2. active process identification number
  3. runtime identification number
  4. process identification number

Answer(s): D



An offline audit log contains the source IP address of a session suspected to have exploited a vulnerability resulting in system compromise.

Which kind of evidence is this IP address?

  1. best evidence
  2. corroborative evidence
  3. indirect evidence
  4. forensic evidence

Answer(s): B



Which system monitors local system operation and local network access for violations of a security policy?

  1. host-based intrusion detection
  2. systems-based sandboxing
  3. host-based firewall
  4. antivirus

Answer(s): A

Explanation:

HIDS is capable of monitoring the internals of a computing system as well as the network packets on its network interfaces. Host-based firewall is a piece of software running on a single Host that can restrict incoming and outgoing Network activity for that host only.



Page 25 of 66



Post your Comments and Discuss Cisco® 200-201 exam with other Community members:

AEB commented on December 11, 2024
The breadth of knowledge for this exam is large. It doesn't seem possible to learn everything on it for an associate level exam.
UNITED STATES
upvote

Bio commented on September 05, 2023
200-201 CBROPS 092023 - Exam still 75% to 80% valid. Suggest to those who wants to pass to study this, along with netacads, and review quizlets to ensure you pass.
GERMANY
upvote

AB commented on August 21, 2023
200-201 is still good. passed Aug 14
UNITED STATES
upvote