Home / Cisco / 200-201

Question list

List of questions

Question 1

(0)

Which evasion technique is indicated when an intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources?

Question 2

(0)

Refer to the exhibit. Which application protocol is in this PCAP file?

Question 3

(0)

Which piece of information is needed for attribution in an investigation?

Question 4

(0)

What does cyber attribution identify in an investigation?

Question 5

(0)

What is a purpose of a vulnerability management framework?

Question 6

(0)

A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property. What is the threat agent in this situation?

Question 7

(0)

What is the practice of giving an employee access to only the resources needed to accomplish their job?

Question 8

(0)

Which metric is used to capture the level of access needed to launch a successful attack?

Question 9

(0)

What is the difference between an attack vector and attack surface?

Question 10

(0)

What is the principle of defense-in-depth?

Question 80 - 200-201 discussion

According to the September 2020 threat intelligence feeds a new malware called Egregor was introduced and used in many attacks. Distnbution of Egregor is pnmanly through a Cobalt Strike that has been installed on victim's workstations using RDP exploits Malware exfiltrates the victim's data to a command and control server. The data is used to force victims pay or lose it by publicly releasing it. Which type of attack is described?