Cisco 200 201 Exam CBROPS Understanding Cisco Cybersecurity Operations Fundamentals

Prévia das questões

Confira os enunciados das primeiras 10 questões. O gabarito aparece apenas ao fazer o simulado.

1. 1 · Geral

   Which event is user interaction?

   • A)gaining root access
   • B)executing remote code
   • C)reading and writing file permission
   • D)opening a malicious file

2. 2 · Geral

   Which security principle requires more than one person is required to perform a critical task?

   • A)least privilege
   • B)need to know
   • C)separation of duties
   • D)due diligence

3. 3 · Geral

   How is attacking a vulnerability categorized?

   • A)action on objectives
   • B)delivery
   • C)exploitation
   • D)installation

4. 4 · Geral

   What is a benefit of agent-based protection when compared to agentless protection?

   • A)It lowers maintenance costs
   • B)It provides a centralized platform
   • C)It collects and detects all traffic locally
   • D)It manages numerous devices simultaneously

5. 5 · Geral

   Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action?

   • A)decision making
   • B)rapid response
   • C)data mining
   • D)due diligence

6. 6 · Geral

   One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context?

   • A)confidentiality, identity, and authorization
   • B)confidentiality, integrity, and authorization
   • C)confidentiality, identity, and availability
   • D)confidentiality, integrity, and availability

7. 7 · Geral

   What is rule-based detection when compared to statistical detection?

   • A)proof of a user's identity
   • B)proof of a user's action
   • C)likelihood of user's action
   • D)falsification of a user's identity

8. 8 · Geral

   A user received a malicious attachment but did not run it. Which category classifies the intrusion?

   • A)weaponization
   • B)reconnaissance
   • C)installation
   • D)delivery

9. 9 · Geral

   Which process is used when IPS events are removed to improve data integrity?

   • A)data availability
   • B)data normalization
   • C)data signature
   • D)data protection

10. 10 · Geral

    An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?

    • A)sequence numbers
    • B)IP identifier
    • C)5-tuple
    • D)timestamps

E mais 58 questões esperando por você.