200-201 practice questions 251–260

1. Question 251 · 334 in bank

   An engineer is working on the implementation of digital certificates for new critical web applications. One of the requirements is that the https connection must be validated and protected against malicious network impersonators. The server will be exposed externally from the DMZ network. Which certificate must be used?

   • AX.509
   • Bprivate CA
   • CSSLv3
   • DTLS1.1

   Show answer

   Answer: A

   Explanation

   The correct answer is A. X.509 is a standard format for public key certificates, which are used to verify the identity of the server and establish a secure connection in HTTPS. These certificates are issued by trusted Certificate Authorities (CAs) and provide the necessary validation for secure communication over the web. The X.509 certificates are used in both SSL and TLS protocols to secure web traffic, ensuring that the connection is encrypted and the server's identity is authenticated.

   Source: Adapted from community discussion — ImGonnaPassIt

   Next question

2. Question 252 · 334 in bank

   What are indicators of attack?

   • Alarge numbers of requests for the same file
   • Bmultiple log ins from different regions
   • Cswells in database read volume
   • Dsuspicious registry or system file changes

   Show answer

   Answer: B

   Next question

3. Question 253 · 334 in bank

   A vulnerability analyst is performing the monthly scan data review. Output data is very big and getting bigger each month. The analyst decides to create a more efficient process to complete the task on time. All false positives and true positives are excluded from the results. The remaining findings will be assigned to a technical team for further remediation. What is the result of such activity?

   • AExclusion is not needed, and all data must be remediated.
   • BData is filtered properly and contains only valid results.
   • CAnalysis is not performed correctly, and it is missing correct data.
   • DFalse negatives must also be excluded from the data.

   Show answer

   Answer: C

   Next question

4. Question 254 · 334 in bank

   How does a certificate authority impact security?

   • AIt authenticates domain identity when requesting an SSL certificate.
   • BIt validates client identity when communicating with the server.
   • CIt authenticates client identity when requesting an SSL certificate.
   • DIt validates the domain identity of the SSL certificate.

   Show answer

   Answer: D

   Explanation

   Reference: https://en.wikipedia.org/wiki/Certificate_authority

   Next question

5. Question 255 · 334 in bank

   

   Refer to the exhibit. What is occurring?

   • AMonitoring of encrypted and unencrypted web sessions for diagnostics.
   • BAnalysis of traffic flows during network capacity testing.
   • CReview of session logs for performance optimization in a distributed application environment.
   • DIdentifying possible malware communications and botnet activity

   Show answer

   Answer: A

   Next question

6. Question 256 · 334 in bank

   

   Refer to the exhibit. Which frame numbers contain a file that is extractable from Wireshark PCAP?

   • AFrame No. 4382
   • BFrames No. 4381 and 4382
   • CFrame No. 4371
   • DFrames No. 4371 and 4382

   Show answer

   Answer: D

   Next question

7. Question 257 · 334 in bank

   Which data type is necessary to get information about source/destination ports?

   • Astatistical data
   • Bsession data
   • Calert data
   • Dconnectivity data

   Show answer

   Answer: B

   Explanation

   Shouldn't the answer be session data? Session data provides information about the five tuples; source IP address/port number, destination IP address/port number and the protocol

   Source: Adapted from community discussion — VividBot

   Next question

8. Question 258 · 334 in bank

   Select 2

   A group of company-owned endpoints were infected by ransomware via phishing email. Which two stakeholders must be involved in the containment phase? (Choose two.)

   • ATechnical Director
   • BChief Information Security Officer
   • COwners of the infected endpoints
   • DIncident Response Team Engineers
   • EChief Physical Security Officer

   Show answer

   Answer: CD

   Next question

9. Question 259 · 334 in bank

   Which event is a vishing attack?

   • Aobtaining disposed documents from an organization
   • Busing a vulnerability scanner on a corporate network
   • Cimpersonating a tech support agent during a phone call
   • Dsetting up a rogue access point near a public hotspot

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/products/security/email-security/what-is-phishing.html#~types-of-phishing-attacks

   Source: Adapted from community discussion — eggheadsv

   Next question

10. Question 260 · 334 in bank

    DRAG DROP - Drag and drop the security concept from the left onto the example of that concept on the right. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-201 practice, question 251. 334 questions available.