ExamGecko
Login
Home / Cisco / 200-201 / List of questions
Ask Question

Cisco 200-201 Practice Test - Questions Answers, Page 15

Add to Whishlist

List of questions

Question 141

Report Export Collapse

Which NIST IR category stakeholder is responsible for coordinating incident response among various business units, minimizing damage, and reporting to regulatory agencies?

Become a Premium Member for full access
  Unlock Premium Member

Question 142

Report Export Collapse

Which incidence response step includes identifying all hosts affected by an attack?

Become a Premium Member for full access
  Unlock Premium Member

Question 143

Report Export Collapse

Which two elements are used for profiling a network? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 144

Report Export Collapse

Which category relates to improper use or disclosure of PII data?

Become a Premium Member for full access
  Unlock Premium Member

Question 145

Report Export Collapse

Which type of evidence supports a theory or an assumption that results from initial evidence?

Become a Premium Member for full access
  Unlock Premium Member

Question 146

Report Export Collapse

Which two elements are assets in the role of attribution in an investigation? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 147

Report Export Collapse

What is personally identifiable information that must be safeguarded from unauthorized access?

Become a Premium Member for full access
  Unlock Premium Member

Question 148

Report Export Collapse

In a SOC environment, what is a vulnerability management metric?

Become a Premium Member for full access
  Unlock Premium Member

Question 149

Report Export Collapse

A security expert is working on a copy of the evidence, an ISO file that is saved in CDFS format. Which type of evidence is this file?

Become a Premium Member for full access
  Unlock Premium Member

Question 150

Report Export Collapse

Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member
Total 378 questions
Go to page: of 38
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibit. What should be interpreted from this packet capture?
An organization that develops high-end technology is going through an internal audit The organization uses two databases The main database stores patent information and a secondary database stores employee names and contact information A compliance team is asked to analyze the infrastructure and identify protected data Which two types of protected data should be identified? (Choose two)
Which security principle is violated by running all processes as root or administrator?
According to CVSS, what is a description of the attack vector score?
What is a difference between SIEM and SOAR?
Refer to the exhibit. What is the potential threat identified in this Stealthwatch dashboard?
DRAG DROP Drag and drop the technology on the left onto the data type the technology provides on the right.
What is a comparison between rule-based and statistical detection?
A SOC analyst detected connections to known C&C and port scanning activity to main HR database servers from one of the HR endpoints via Cisco StealthWatch. What are the two next steps of the SOC team according to the NISTSP800-61 incident handling process? (Choose two)
Refer to the exhibit. In which Linux log file is this output found?