Cisco 200-201 Practice Test - Questions Answers, Page 21

A botnet is a network of compromised computers controlled by an attacker. Botnets are often used to carry out Distributed Denial of Service (DDoS) attacks, where the compromised machines are directed to flood a target with traffic, rendering it inaccessible.Reference:Cisco Cybersecurity Operations Fundamentals, Module 1: Security Concepts, Lesson 1.3: Common Network Application Operations and Attacks, Topic 1.3.4: Denial-of-Service Attacks

Role-Based Access Control (RBAC) is an approach to restricting system access to authorized users based on their roles within an organization. It depends on the job functions that individual users have as part of their responsibilities and is designed to reduce administrative work by assigning roles based on job competency, authority, and responsibility.Reference:Cisco Cybersecurity Operations Fundamentals, Module 1: Security Concepts, Lesson 1.2: Data Protection, Topic 1.2.2: Access Control Models

In the context of the cyber kill chain model, spam campaigns fall under the ''delivery'' phase where attackers deliver malicious payloads via email or other means to target systems or networks.Reference:Cisco Cybersecurity Operations Fundamentals, Module 1: Security Concepts, Lesson 1.4: Security Monitoring, Topic 1.4.2: The Cyber Kill Chain Model

The defense-in-depth principle is a strategy of applying multiple layers of security controls to protect an asset from threats. It is based on the assumption that no single security measure is sufficient to prevent all attacks, and that each layer adds more protection and reduces the risk of compromise. One example of applying the defense-in-depth principle is implementing alerts for unexpected asset malfunctions, which can indicate a potential security breach or incident.Reference:Cisco Cybersecurity Operations Fundamentals, Module 1: Security Concepts, Lesson 1.1: The CIA Triad and Security Concepts, Topic 1.1.4: Defense-in-Depth Principle

With stronger data visibility, detailed information about the data in real-time is provided. This enhanced visibility allows for a more comprehensive analysis of network traffic, enabling security professionals to identify and mitigate threats more effectively.Reference:=Cisco Cybersecurity Operations Fundamentals

Encryption ensures that data is secure and unreadable to unauthorized individuals without the proper decryption key.It is a critical aspect of maintaining data confidentiality and security, especially in the transmission of sensitive information over potentially insecure networks1.

In the context of a cybersecurity breach, attribution involves identifying the responsible party. Since the external USB device was not found, the focus shifts to the actions performed by the receptionist.Analyzing these actions can provide insights into how the breach occurred and may help in attributing the incident to the threat actor

The logs indicating multiple local TCP connection events are typically provided by a firewall. Firewalls are responsible for monitoring and controlling incoming and outgoing network traffic based on predetermined security rules, and they generate logs that detail such events, which can be used for further analysis and incident response.Reference:= Cisco Cybersecurity Operations Fundamentals

The correct display filter for analyzing FTP traffic in a PCAP file is ''tcp.port==21''. This filter will show all TCP packets where the port number is 21, which is the standard port for FTP control messages.