Free 200-201 Exam Braindumps
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Questions 176–180 (page: 37)

Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)

  1. detection and analysis
  2. post-incident activity
  3. vulnerability management
  4. risk assessment
  5. vulnerability scoring

Answer(s): A,B


Reference:

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf



DRAG DROP (Drag and Drop is not supported)
Drag and drop the definition from the left onto the phase on the right to classify intrusion events according to the Cyber Kill Chain model.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Refer to the exhibit.
What does this output indicate?

  1. HTTPS ports are open on the server.
  2. SMB ports are closed on the server.
  3. FTP ports are open on the server.
  4. Email ports are closed on the server.

Answer(s): D



DRAG DROP (Drag and Drop is not supported)
Drag and drop the elements from the left into the correct order for incident handling on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which metric should be used when evaluating the effectiveness and scope of a Security Operations Center?

  1. The average time the SOC takes to register and assign the incident.
  2. The total incident escalations per week.
  3. The average time the SOC takes to detect and resolve the incident.
  4. The total incident escalations per month.

Answer(s): C



Viewing page 37 of 70
Viewing questions 181 - 185 out of 477 questions


Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!