What is a disadvantage of the asymmetric encryption system?

It is slow compared to the symmetric encryption system.

Asymmetric encryption is used to transfer the data, and symmetric is used to encrypt small chunks of data.

Asymmetric encryption is an old technique, and symmetric encryption is the newer one.

It is less secure because it uses a single key for encryption.

What is the key difference between mandatory access control (MAC) and discretionary access control (DAC)?

MAC is controlled by the OS, and DAC is controlled by the owner of the access list.

DAC is controlled by the OS, and MAC is controlled by the owner of the access list.

DAC is the most strict access control, and MAC is object-based access.

MAC is controlled by the OS, and DAC is controlled by the owner of the access list.

MAC is the most strict access control, and DAC is object-based access.

What is the purpose of a ransomware attack?

to make files inaccessible by encrypting the data

to decrypt encrypted data and disks

to send keystrokes to a threat actor

What is the difference between the ACK flag and the RST flag?

The ACK flag validates the receipt of the previous packet in the stream, and the same session is being closed by the RST flag.

The ACK flag validates the next packets to be sent to a destination, and the RST flag is what the RST returns to indicate that the destination is reachable.

The RST flag identifies the connection as reliable and trustworthy within the handshake process, and the ACK flag prepares a response by opening a session between the source and destination.

The RST flag establishes the communication, and the ACK flag cancels spontaneous connections that were not specifically sent to the expecting host.

What is the difference between attack surface and vulnerability?

An attack surface describes how software or a system is exposed to potential attacks, and a vulnerability is an actual weakness that exposes the potential risk.

An attack surface is a way of taking advantage of a system or resource, and a vulnerability is a specific technique utilized by the vulnerability.

A vulnerability describes how software or a system is exposed to potential attacks, and an attack surface is an actual weakness that exposes the potential risk.

A vulnerability is a way of taking advantage of a system or resource, and an attack surface is a specific technique utilized by the vulnerability.

An attack surface describes how software or a system is exposed to potential attacks, and a vulnerability is an actual weakness that exposes the potential risk.

What are two differences of deep packet inspection compared to stateful firewall inspection? (Choose two.)

offers application-level monitoring

different rule configurations based on payload pattern

static lists for maintaining a strict access control level

offers application-level monitoring

inspection of only the first packet during a connection attempt

different rule configurations based on payload pattern

quality of service capabilities based on list definitions

Refer to the exhibit. Refer to the exhibit. A SOC engineer is analyzing Cuckoo Sandbox report for a file that has been identified as suspicious by the endpoint security system. What is the state of the file?

The file was identified as PE32 executable with a high level of entropy to bypass AV via encryption.

The file was detected as an executable binary file, but no suspicious activity was detected and it is false positive.

The file was detected as executable and was marked by the SSDeep hashing algorithm as suspicious.

The file identified as an executable binary for Microsoft Word with macros creating hidden process via PowerShell.

What is the difference between antimalware and antivirus solutions?

Antimalware applications operate proactively to block ransomware before it can encrypt data, and antivirus cannot resist advanced classes of malware.

Antivirus operates using thousands of pieces of threat intelligence information from existing samples, and antimalware can identify patterns of well-known attack types and detect an attack vector before an attack is successful.

Antivirus applications operate proactively to block ransomware before it can encrypt data, and antimalware cannot resist advanced classes of malware.

Antimalware operates using thousands of pieces of threat intelligence information from existing samples, and antivirus can identify patterns of well-known attack types and detect an attack vector before an attack is successful.

Refer to the exhibit. Refer to the exhibit. What type of event is occurring?

Malware attempting to spread laterally

Legitimate web browsing activity

Distributed Denial of Service (DDoS) attack

User trying to access a file share

Malware attempting to spread laterally

Cisco 200-201 Practice Test 10 - Free Online Exam Questions 361-378

Refer to the exhibit.

Cisco 200-201 image Question 30 63879656099083369354678

Refer to the exhibit. An engineer must map these events to the source technology that generated the event logs. To which technology do the generated logs belong?

Become a Premium Member for full access

Unlock Premium Member

Cisco 200-201 Practice Test 10

Question

Cisco 200-201 Practice Tests

Practice Tests