200-201 practice questions 191–200

1. Question 191 · 334 in bank

   What is a difference between a threat and a risk?

   • AA threat can be people, property, or information, and risk is a probability by which these threats may bring harm to the business.
   • BA risk is a flaw or hole in security, and a threat is what is being used against that flaw.
   • CA risk is an intersection between threat and vulnerabilities, and a threat is what a security engineer is trying to protect against.
   • DA threat is a sum of risks, and a risk itself represents a specific danger toward the asset.

   Show answer

   Answer: C

   Next question

2. Question 192 · 334 in bank

   A SOC analyst observed Ursnif malware at the SIEM dashboard. The analyst opened the PCAP file to search the certificate issue data. Where must the analyst navigate?

   • Aunder the rdnSequence line
   • Bunder the validity line
   • Cunder the subject
   • Dunder the signed certificate

   Show answer

   Answer: A

   Next question

3. Question 193 · 334 in bank

   What is the difference between an attack vector and an attack surface?

   • AAn attack surface identifies vulnerabilities that require user input or validation; and an attack vector identifies vulnerabilities that are independent of user actions.
   • BAn attack vector identifies components that can be exploited; and an attack surface identifies the potential path an attack can take to penetrate the network.
   • CAn attack surface recognizes which network parts are vulnerable to an attack; and an attack vector identifies which attacks are possible with these vulnerabilities.
   • DAn attack vector identifies the potential outcomes of an attack; and an attack surface launches an attack using several methods against the identified vulnerabilities.

   Show answer

   Answer: C

   Explanation

   An attack surface represents the overall set of vulnerabilities that an attacker could potentially exploit to launch an attack. This can include hardware, software, network protocols, configurations, and user accounts. By identifying and assessing the attack surface, defenders can understand the overall security posture of their system or network and take steps to reduce its exposure to potential attacks. An attack vector, on the other hand, refers to the specific method or path that an attacker uses to exploit a particular vulnerability within the attack surface. An attacker may use multiple attack vectors to reach their goal, such as social engineering, malware, or exploiting a specific software flaw.

   Source: Adapted from community discussion — drdecker100

   Next question

4. Question 194 · 334 in bank

   Which technique is a low-bandwidth attack?

   • Aevasion
   • Bphishing
   • Csession hijacking
   • Dsocial engineering

   Show answer

   Answer: A

   Next question

5. Question 195 · 334 in bank

   

   Refer to exhibit. An analyst performs the analysis of the pcap file to detect the suspicious activity. What challenges did the analyst face in terms of data visibility?

   • Adata encapsulation
   • Bcode obfuscation
   • Cdata encryption
   • DIP fragmentation

   Show answer

   Answer: C

   Next question

6. Question 196 · 334 in bank

   What matches the regular expression c(rgr)+e?

   • Ac(rgr)e
   • Bcrgrrgre
   • Ccrgr+e
   • Dce

   Show answer

   Answer: A

   Next question

7. Question 197 · 334 in bank

   

   Refer to the exhibit. An attacker scanned the server using Nmap. What did the attacker obtain from this scan?

   • AIdentified a firewall device preventing the port state from being returned.
   • BIdentified open SMB ports on the server.
   • CGathered information on processes running on the server.
   • DGathered a list of Active Directory users.

   Show answer

   Answer: A

   Next question

8. Question 198 · 334 in bank

   Which attack method is being used when an attacker tries to compromise a network with an authentication system that uses only 4-digit numeric passwords and no username?

   • Areplay
   • BSQL injection
   • Cdictionary
   • Dcross-site scripting

   Show answer

   Answer: C

   Next question

9. Question 199 · 334 in bank

   A company's cyber security team performed a phishing simulation campaign for employees and performed security awareness trainings to affected personal. According to NIST.SP800-61, at which phase of incident response is this action?

   • Apost-incident activity phase
   • Bdetection and analyze phase
   • Cpreparation phase
   • Deradication and recovery phase

   Show answer

   Answer: C

   Next question

10. Question 200 · 334 in bank

    How is attacking a vulnerability categorized?

    • Aaction on objectives
    • Bdelivery
    • Cexploitation
    • Dinstallation

    Show answer

    Answer: C

    Explanation

    "C" is correct Here are the steps of the Kill Chain Model. The example are in the context of the question 1) Reconnaissance - identified vulnerabilities 2) Weaponization - prepare (in lab) the weapon, for example a file with malware code. 3) Delivery - transmit the file (e-mail, website, etc) 4) Exploitation - trigger the weapon (execute the code), exploiting the vulnerability 5) Installation - the weapon installs a backdoor (server) 6) Command and control (C2 or CnC) - connection to the treat actor 7) Actions on objectives - do the job (stealing information, for example)

    Source: Adapted from community discussion — anonymous1966

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-201 practice, question 191. 334 questions available.