QUESTION: 25

What is a purpose of a vulnerability management framework?

identifies, removes, and mitigates system vulnerabilities
detects and removes vulnerabilities in source code
conducts vulnerability scans on the network
manages a list of reported vulnerabilities

Answer(s): A

QUESTION: 26

A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property.
What is the threat agent in this situation?

the intellectual property that was stolen
the defense contractor who stored the intellectual property
the method used to conduct the attack
the foreign government that conducted the attack

Answer(s): D

Reveal Solution Next Question

QUESTION: 27

What is the practice of giving an employee access to only the resources needed to accomplish their job?

principle of least privilege
organizational separation
separation of duties
need to know principle

Answer(s): A

Reveal Solution Next Question

QUESTION: 28

Which metric is used to capture the level of access needed to launch a successful attack?

privileges required
user interaction
attack complexity
attack vector

Answer(s): D

Explanation:

Attack Vector ( AV) represents the level of access an attacker needs to have to exploit a vulnerability. It can assume four values: Network, Adjacent, Local and Physical.

Reference:

Official cert Guide Cisco CyberOps Associate CBROPS 200-201 Chapter7: Introduction to Security Operations Management.

Reveal Solution Next Question

Free 200-201 Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28

Explanation:

Reference: