A security engineer has a video of a suspect entering a data center that was captured on the same day that files in the same data center were transferred to a competitor.Which type of evidence is this?
Answer(s): C
DRAG DROP (Drag and Drop is not supported)Drag and drop the type of evidence from the left onto the description of that evidence on the right.
Answer(s): A
Refer to the exhibit. An analyst received this alert from the Cisco ASA device, and numerous activity logs were produced. How should this type of evidence be categorized?
Answer(s): D
https://vwannabe.com/2018/01/02/ccna-cyber-ops-secops-1-0/
Refer to the exhibit. Which piece of information is needed to search for additional downloads of this file by other hosts?
An organization’s security team has detected network spikes coming from the internal network. An investigation has concluded that the spike in traffic was from intensive network scanning. How should the analyst collect the traffic to isolate the suspicious host?
Answer(s): B
Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 200-201 content, but please register or login to continue.