Question 281 · 334 in bank
What is sliding window anomaly detection?
Show answer
Answer: D
200-201AssociateCiscoAll questions freePage 29 of 34
200-201 practice questions 281–290
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)334 questions across 34 pages are complete and free, with no account or card.
Official study references
334 questions in this bank
Free access · progress saved on this device
Question 282 · 334 in bank
How does an attacker observe network traffic exchanged between two users?
Show answer
Answer: B
Question 283 · 334 in bank
One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context?
Show answer
Answer: D
Explanation
Information security's primary focus is the balanced protection of the confidentiality, integrity, and availability of data (also known as the CIA triad) while maintaining a focus on efficient policy implementation, all without hampering organization productivity. (source: https://en.wikipedia.org/wiki/Information_security) So D is correct
Source: Adapted from community discussion — Leo_Visser
Question 284 · 334 in bank
Which type of data consists of connection level, application-specific records generated from network traffic?
Show answer
Answer: A
Explanation
ransaction data, also known as session data, is information generated by network connections between devices and servers, such as IP addresses, ports, protocols, and other metadata. It also includes details about the specific applications or services being used, such as URLs, HTTP headers, and other application-specific data.
Source: Adapted from community discussion — drdecker100
Question 285 · 334 in bank
An engineer receives a security alert that traffic with a known TOR exit node has occurred on the network. What is the impact of this traffic?
Show answer
Answer: D
Explanation
Correct answer = D A Tor exit node is basically the last Tor node or the gateway where the Tor encrypted traffic exits to the Internet. A Tor exit node can be targeted to monitor Tor traffic. Many organizations block Tor exit nodes in their environment. The Tor project has a dynamic list of Tor exit nodes that makes this task a bit easier. This Tor exit node list can be downloaded from https://check.torproject.org/exit-addresses.
Source: Adapted from community discussion — anonymous1966
Question 286 · 334 in bank
What is an example of social engineering attacks?
Show answer
Answer: B
Explanation
Not A. Because A is about and unexpected email from an unknown person. Its not C. Because C simply states a verbal request to an admin and anyone can pull that card. I doubt its D anyone can receieve a webex invite. But B. for sure picks a high level target your the most likely to respond to. HR. I think B is correct.
Source: Adapted from community discussion — JoJanathan
Question 287 · 334 in bank
Refer to the exhibit. What is occurring in this network?
Show answer
Answer: A
Explanation
ARP Spoofing Also known as ARP poisoning, is a Man in the Middle (MitM) attack that allows attackers to intercept communication between network devices. The attack works as follows: The attacker must have access to the network. They scan the network to determine the IP addresses of at least two devices. The attacker uses a spoofing tool such as Arpspoof or Driftnet, to send out forged ARP responses. The forged responses advertise that the correct MAC address for both IP addresses, belonging to the router and workstation, is the attacker’s MAC address. This fools both router and workstation to connect to the attacker’s machine, instead of to each other. The two devices update their ARP cache entries and from that point onwards, communicate with the attacker instead of directly with each other. The attacker is now secretly in the middle of all communications. https://www.imperva.com/learn/application-security/arp-spoofing/
Source: Adapted from community discussion — SecurityGuy
Question 288 · 334 in bank
Which data format is the most efficient to build a baseline of traffic seen over an extended period of time?
Show answer
Answer: C
Explanation
Netflow - It is a protocol developed by Cisco that is used to collect and record all IP Traffic going to and from a Cisco router or switch that is Netflow enabled. - Keyword is "most efficient".
Source: Adapted from community discussion — SecurityGuy
Question 289 · 334 in bank
Which action prevents buffer overflow attacks?
Show answer
Answer: C
Explanation
The action that can help prevent buffer overflow attacks is: C. input validation Buffer overflow attacks occur when a program or application attempts to write data beyond the boundaries of a buffer, leading to overwriting adjacent memory areas. This can be exploited by an attacker to inject and execute malicious code. Input validation refers to the process of checking and validating user input to ensure it meets the expected criteria and does not exceed the allocated buffer size. By implementing proper input validation techniques, such as length checks, input sanitization, and boundary checks, developers can prevent buffer overflow vulnerabilities.
Source: Adapted from community discussion — Topsecret
Question 290 · 334 in bank
Which type of attack occurs when an attacker is successful in eavesdropping on a conversation between two IP phones?
Show answer
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
200-201 practice, question 281. 334 questions available.
About this question bank
Version 1.0.0. How we source questions