support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 200-201

Free 200-201 Exam Braindumps
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Questions 111–115 (page: 24)

Page 24 of 70
PDF with 477 Questions

Refer to the exhibit.



What is the potential threat identified in this Stealthwatch dashboard?

  1. A policy violation is active for host 10.10.101.24.
  2. A host on the network is sending a DDoS attack to another inside host.
  3. There are two active data exfiltration alerts.
  4. A policy violation is active for host 10.201.3.149.

Answer(s): C



Which security technology allows only a set of pre-approved applications to run on a system?

  1. application-level blacklisting
  2. host-based IPS
  3. application-level whitelisting
  4. antivirus

Answer(s): C



An investigator is examining a copy of an ISO file that is stored in CDFS format.
What type of evidence is this file?

  1. data from a CD copied using Mac-based system
  2. data from a CD copied using Linux system
  3. data from a DVD copied using Windows system
  4. data from a CD copied using Windows

Answer(s): B



Which piece of information is needed for attribution in an investigation?

  1. proxy logs showing the source RFC 1918 IP addresses
  2. RDP allowed from the Internet
  3. known threat actor behavior
  4. 802.1x RADIUS authentication pass arid fail logs

Answer(s): C



What does cyber attribution identity in an investigation?

  1. cause of an attack
  2. exploit of an attack
  3. vulnerabilities exploited
  4. threat actors of an attack

Answer(s): D



  PDF
Viewing page 24 of 70
Viewing questions 116 - 120 out of 477 questions


Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!