350-201 Practice Test & Exam Questions (Page 4 )

QUESTION: 93

Refer to the exhibit. An employee is a victim of a social engineering phone call and installs remote access software to allow an “MS Support” technician to check his machine for malware. The employee becomes suspicious after the remote technician requests payment in the form of gift cards. The employee has copies of multiple, unencrypted database files, over 400 MB each, on his system and is worried that the scammer copied the files off but has no proof of it. The remote technician was connected sometime between 2:00 pm and 3:00 pm over https. What should be determined regarding data loss between the employee’s laptop and the remote technician’s system?

No database files were disclosed
The database files were disclosed
The database files integrity was violated
The database files were intentionally corrupted, and encryption is possible

Answer(s): C

Show Answer Next Question

QUESTION: 92

A SOC analyst is notified by the network monitoring tool that there are unusual types of internal traffic on IP subnet 103.921.2239.0/24. The analyst discovers unexplained encrypted data files on a computer system that belongs on that specific subnet. What is the cause of the issue?

DDoS attack
phishing attack
virus outbreak
malware outbreak

Answer(s): D

Show Answer Next Question

QUESTION: 91

A SOC analyst is investigating a recent email delivered to a high-value user for a customer whose network their organization monitors. The email includes a suspicious attachment titled “Invoice RE: 0004489”. The hash of the file is gathered from the Cisco Email Security Appliance. After searching Open Source Intelligence, no available history of this hash is found anywhere on the web. What is the next step in analyzing this attachment to allow the analyst to gather indicators of compromise?

Run and analyze the DLP Incident Summary Report from the Email Security Appliance
Ask the company to execute the payload for real time analysis
Investigate further in open source repositories using YARA to find matches
Obtain a copy of the file for detonation in a sandbox

Answer(s): D

Show Answer Next Question

QUESTION: 90

A Mac laptop user notices that several files have disappeared from their laptop documents folder. While looking for the files, the user notices that the browser history was recently cleared. The user raises a case, and an analyst reviews the network usage and discovers that it is abnormally high. Which step should be taken to continue the investigation?

Run the sudo sysdiagnose command
Run the sh command
Run the w command
Run the who command

Answer(s): A

Reference:

https://eclecticlight.co/2016/02/06/the-ultimate-diagnostic-tool-sysdiagnose/

Show Answer Next Question

QUESTION: 89 DRAG DROP

Drag and drop the function on the left onto the mechanism on the right.
Select and Place:

Exhibit A:

Exhibit B:

Please refer to Exhibit B for the answer.

Answer(s): A

Show Answer Next Question

Cisco 350-201 Exam
Performing CyberOps Using Core Security Technologies (CBRCOR) (Page 4 )

QUESTION: 93

QUESTION: 92

QUESTION: 91

QUESTION: 90

Reference:

QUESTION: 89 DRAG DROP

Join the 350-201 Discussion

Cisco 350-201 Exam Performing CyberOps Using Core Security Technologies (CBRCOR) (Page 4 )

QUESTION: 93

QUESTION: 92

QUESTION: 91

QUESTION: 90

Reference:

QUESTION: 89 DRAG DROP

Join the 350-201 Discussion

Cisco 350-201 Exam
Performing CyberOps Using Core Security Technologies (CBRCOR) (Page 4 )