ExamGecko
Login
Home / Cisco / 200-201 / List of questions
Ask Question

Cisco 200-201 Practice Test - Questions Answers, Page 22

Add to Whishlist

List of questions

Question 211

Report Export Collapse

Refer to the exhibit.

Cisco 200-201 image Question 211 109388 10072024004349000000

A network administrator is investigating suspicious network activity by analyzing captured traffic. An engineer notices abnormal behavior and discovers that the default user agent is present in the headers of requests and data being transmitted What is occurring?

Become a Premium Member for full access
  Unlock Premium Member

Question 212

Report Export Collapse

A company encountered a breach on its web servers using IIS 7 5 Dunng the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1 2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?

Become a Premium Member for full access
  Unlock Premium Member

Question 213

Report Export Collapse

What is the difference between discretionary access control (DAC) and role-based access control (RBAC)?

Become a Premium Member for full access
  Unlock Premium Member

Question 214

Report Export Collapse

Which technology prevents end-device to end-device IP traceability?

Become a Premium Member for full access
  Unlock Premium Member

Question 215

Report Export Collapse

What are the two differences between stateful and deep packet inspection? (Choose two )

Become a Premium Member for full access
  Unlock Premium Member

Question 216

Report Export Collapse

What is the purpose of command and control for network-aware malware?

Become a Premium Member for full access
  Unlock Premium Member

Question 217

Report Export Collapse

What do host-based firewalls protect workstations from?

Become a Premium Member for full access
  Unlock Premium Member

Question 218

Report Export Collapse

Refer to exhibit.

Cisco 200-201 image Question 218 109395 10072024004349000000

An analyst performs the analysis of the pcap file to detect the suspicious activity. What challenges did the analyst face in terms of data visibility?

Become a Premium Member for full access
  Unlock Premium Member

Question 219

Report Export Collapse

Which two measures are used by the defense-m-depth strategy? (Choose two)

Become a Premium Member for full access
  Unlock Premium Member

Question 220

Report Export Collapse

Which option describes indicators of attack?

Become a Premium Member for full access
  Unlock Premium Member
Total 378 questions
Go to page: of 38
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibit. What should be interpreted from this packet capture?
An organization that develops high-end technology is going through an internal audit The organization uses two databases The main database stores patent information and a secondary database stores employee names and contact information A compliance team is asked to analyze the infrastructure and identify protected data Which two types of protected data should be identified? (Choose two)
Which security principle is violated by running all processes as root or administrator?
According to CVSS, what is a description of the attack vector score?
What is a difference between SIEM and SOAR?
Refer to the exhibit. What is the potential threat identified in this Stealthwatch dashboard?
DRAG DROP Drag and drop the technology on the left onto the data type the technology provides on the right.
What is a comparison between rule-based and statistical detection?
A SOC analyst detected connections to known C&C and port scanning activity to main HR database servers from one of the HR endpoints via Cisco StealthWatch. What are the two next steps of the SOC team according to the NISTSP800-61 incident handling process? (Choose two)
Refer to the exhibit. In which Linux log file is this output found?