350-201 practice questions 31–40

1. Question 31 · 137 in bank

   Which bash command will print all lines from the `colors.txt` file containing the non case-sensitive pattern `Yellow`?

   • Agrep -i ג€yellowג€ colors.txt
   • Blocate ג€yellowג€ colors.txt
   • Clocate -i ג€Yellowג€ colors.txt
   • Dgrep ג€Yellowג€ colors.txt

   Show answer

   Answer: C

   Next question

2. Question 32 · 137 in bank

   An engineer received multiple reports from users trying to access a company website and instead of landing on the website, they are redirected to a malicious website that asks them to fill in sensitive personal data. Which type of attack is occurring?

   • AAddress Resolution Protocol poisoning
   • Bsession hijacking attack
   • Cteardrop attack
   • DDomain Name System poisoning

   Show answer

   Answer: D

   Next question

3. Question 33 · 137 in bank

   

   Refer to the exhibit. An engineer is performing static analysis of a file received and reported by a user. Which risk is indicated in this STIX?

   • AThe file is redirecting users to a website that requests privilege escalations from the user.
   • BThe file is redirecting users to the website that is downloading ransomware to encrypt files.
   • CThe file is redirecting users to a website that harvests cookies and stored account information.
   • DThe file is redirecting users to a website that is determining users' geographic location.

   Show answer

   Answer: B

   Explanation

   The exhibit provided in the question does not contain a STIX document or any information that can be used to determine the risk or threat posed by the code. The exhibit shows a code snippet written in C# that makes a HTTP request to a geo-location service and parses the XML response to extract information such as IP address, country name, country code, region name, city, and time zone. Therefore, none of the options A, B, C, or D are correct. - ChatGPT

   Source: Adapted from community discussion — DrVoIP

   Next question

4. Question 34 · 137 in bank

   A payroll administrator noticed unexpected changes within a piece of software and reported the incident to the incident response team. Which actions should be taken at this step in the incident response workflow?

   • AClassify the criticality of the information, research the attacker's motives, and identify missing patches
   • BDetermine the damage to the business, extract reports, and save evidence according to a chain of custody
   • CClassify the attack vector, understand the scope of the event, and identify the vulnerabilities being exploited
   • DDetermine the attack surface, evaluate the risks involved, and communicate the incident according to the escalation plan

   Show answer

   Answer: D

   Explanation

   I think its B. The only thing we know is the user noticed a change. Gathering evidence and logs would be my move, escalating too soon migth not be good.

   Source: Adapted from community discussion — CiscoTester

   Next question

5. Question 35 · 137 in bank

   A SOC team receives multiple alerts by a rule that detects requests to malicious URLs and informs the incident response team to block the malicious URLs requested on the firewall. Which action will improve the effectiveness of the process?

   • ABlock local to remote HTTP/HTTPS requests on the firewall for users who triggered the rule.
   • BInform the user by enabling an automated email response when the rule is triggered.
   • CInform the incident response team by enabling an automated email response when the rule is triggered.
   • DCreate an automation script for blocking URLs on the firewall when the rule is triggered.

   Show answer

   Answer: D

   Next question

6. Question 36 · 137 in bank

   A cloud engineer needs a solution to deploy applications on a cloud without being able to manage and control the server OS. Which type of cloud environment should be used?

   • AIaaS
   • BPaaS
   • CDaaS
   • DSaaS

   Show answer

   Answer: B

   Next question

7. Question 37 · 137 in bank

   Select 2

   Engineers are working to document, list, and discover all used applications within an organization. During the regular assessment of applications from the HR backup server, an engineer discovered an unknown application. The analysis showed that the application is communicating with external addresses on a non- secure, unencrypted channel. Information gathering revealed that the unknown application does not have an owner and is not being used by a business unit. What are the next two steps the engineers should take in this investigation? (Choose two.)

   • ADetermine the type of data stored on the affected asset, document the access logs, and engage the incident response team.
   • BIdentify who installed the application by reviewing the logs and gather a user access log from the HR department.
   • CVerify user credentials on the affected asset, modify passwords, and confirm available patches and updates are installed.
   • DInitiate a triage meeting with department leads to determine if the application is owned internally or used by any business unit and document the asset owner.

   Show answer

   Answer: AB

   Next question

8. Question 38 · 137 in bank

   Select 2

   A security incident affected an organization's critical business services, and the customer-side web API became unresponsive and crashed. An investigation revealed a spike of API call requests and a high number of inactive sessions during the incident. Which two recommendations should the engineers make to prevent similar incidents in the future? (Choose two.)

   • AConfigure shorter timeout periods.
   • BDetermine API rate-limiting requirements.
   • CImplement API key maintenance.
   • DAutomate server-side error reporting for customers.
   • EDecrease simultaneous API responses.

   Show answer

   Answer: AB

   Next question

9. Question 39 · 137 in bank

   What is the impact of hardening machine images for deployment?

   • Areduces the attack surface
   • Bincreases the speed of patch deployment
   • Creduces the steps needed to mitigate threats
   • Dincreases the availability of threat alerts

   Show answer

   Answer: A

   Next question

10. Question 40 · 137 in bank

    What is the difference between process orchestration and automation?

    • AOrchestration combines a set of automated tools, while automation is focused on the tools to automate process flows.
    • BOrchestration arranges the tasks, while automation arranges processes.
    • COrchestration minimizes redundancies, while automation decreases the time to recover from redundancies.
    • DAutomation optimizes the individual tasks to execute the process, while orchestration optimizes frequent and repeatable processes.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-201 practice, question 31. 137 questions available.