200-201 practice questions 41–50

1. Question 41 · 334 in bank

   Which technology should be used to implement a solution that makes routing decisions based on HTTP header, uniform resource identifier, and SSL session ID attributes?

   • AAWS
   • BIIS
   • CLoad balancer
   • DProxy server

   Show answer

   Answer: C

   Explanation

   Load Balancing: HTTP(S) load balancing is one of the oldest forms of load balancing. This form of load balancing relies on layer 7, which means it operates in the application layer. This allows routing decisions based on attributes like HTTP header, uniform resource identifier, SSL session ID, and HTML form data.

   Source: Adapted from community discussion — beowolf

   Next question

2. Question 42 · 334 in bank

   Which regular expression matches "color" and "colour"?

   • Acolo?ur
   • Bcol[0גˆ’8]+our
   • Ccolou?r
   • Dcol[0גˆ’9]+our

   Show answer

   Answer: C

   Explanation

   "C" is correct For me there are some codification error in the page that greek chars are shown. The correct question is: Which regular expression matches "color" and "colour"? A . colo?ur B . col[08]+our C . colou?r D . col[09]+our

   Source: Adapted from community discussion — anonymous1966

   Next question

3. Question 43 · 334 in bank

   Which artifact is used to uniquely identify a detected file?

   • Afile timestamp
   • Bfile extension
   • Cfile size
   • Dfile hash

   Show answer

   Answer: D

   Next question

4. Question 44 · 334 in bank

   A security engineer deploys an enterprise-wide host/endpoint technology for all of the company's corporate PCs. Management requests the engineer to block a selected set of applications on all PCs. Which technology should be used to accomplish this task?

   • Aapplication whitelisting/blacklisting
   • Bnetwork NGFW
   • Chost-based IDS
   • Dantivirus/antispyware software

   Show answer

   Answer: A

   Next question

5. Question 45 · 334 in bank

   What is the virtual address space for a Windows process?

   • Aphysical location of an object in memory
   • Bset of pages that reside in the physical memory
   • Csystem-level memory protection feature built into the operating system
   • Dset of virtual memory addresses that can be used

   Show answer

   Answer: D

   Explanation

   "D" is correct (for the certification exam) There is an exactly same question in book (chap 11): 13. What is a virtual address space in Windows? A - The physical memory allocated for processes B - A temporary space for processes to execute C - The set of virtual memory addresses that references the physical memory object a process is permitted to use D - The virtual memory address used for storing applications Correct answer: C. A virtual address space in Windows is the set of virtual memory addresses that references the physical memory object a process is permitted to use. Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide By Omar Santos

   Source: Adapted from community discussion — anonymous1966

   Next question

6. Question 46 · 334 in bank

   Which utility blocks a host portscan?

   • AHIDS
   • Bsandboxing
   • Chost-based firewall
   • Dantimalware

   Show answer

   Answer: C

   Explanation

   HIDS (unlike HIPS) does not take any further actions (other than reporting) when detecting an Emerging Threats on local system. That's why I think Host-based Firewall is the right answer.

   Source: Adapted from community discussion — JoeDinsmore

   Next question

7. Question 47 · 334 in bank

   Which evasion technique is indicated when an intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources?

   • Aresource exhaustion
   • Btunneling
   • Ctraffic fragmentation
   • Dtiming attack

   Show answer

   Answer: A

   Explanation

   "A" is correct Resource exhaustion is a type of denial-of-service attack; however, it can also be used to evade detection by security defenses. A simple definition of resource exhaustion is “consuming the resources necessary to perform an action.” Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide By Omar Santos

   Source: Adapted from community discussion — anonymous1966

   Next question

8. Question 48 · 334 in bank

   DRAG DROP - Drag and drop the technology on the left onto the data type the technology provides on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   tcpdump: full packet capture - tcpdump is a tool for capturing and analyzing packets, allowing for detailed analysis of network traffic. web content filtering: transaction data - web content filtering is a technology that inspects and filters web traffic, looking for specific types of content or behavior. traditional stateful firewall: connection event - a stateful firewall monitors connections between devices and tracks their state, allowing it to make informed decisions about whether to allow or block traffic. Netflow: session data - Netflow is a protocol used to collect and analyze network traffic data, providing information about the volume and flow of traffic in a given network.

   Source: Adapted from community discussion — drdecker100

   

   Next question

9. Question 49 · 334 in bank

   

   Refer to the exhibit. Which application protocol is in this PCAP file?

   • ASSH
   • BTCP
   • CTLS
   • DHTTP

   Show answer

   Answer: C

   Explanation

   It's a very tricky or wrong question Partially agree with you, but the correct answer actually should be "B", because the wireshark identify and recognise automatically the TLS as a protocol (Make sure in the next #112 question - TLSv1.2) and also HTTP. On the one hand in this captured packet there isn't TLS header/layer. Although the port is TCP443, but it doesn't mean that is a HTTPS traffic! It's only a traffic that use TCP443: for extreme idiot example this traffic would be a telnet traffic with modified port number. On the other hand the HTTP also wrong answer: firstly the wireshark recognise the HTTP also, secondly in this case the bulk data/body is showed in the captured packet as "Hyperttext Transfer Protocol" not as simple "Data [205 byte]" I know there is a "www" data in the body, but it isn't mean that is a real HTTP packet. And I know the TCP isn't an application protocol, so may be the question also wrong. But I think the key here is the port/TCP not an upper layer protocol.

   Source: Adapted from community discussion — tsabee

   Next question

10. Question 50 · 334 in bank

    DRAG DROP -

    

    Refer to the exhibit. Drag and drop the element name from the left onto the appropriate piece of the PCAP file on the right. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Solution is just showing the same thing in both columns. My answer: sip .15; dip .9; sprt 50588; dprt 443; net proto ipv4; transport proto tcp; and app tls. Though TLS is actually a session layer protocol that provides services to the presentation and transport layers in OSI. Since TCP/IP model combines top three OSI layers, one could interpret TLS as an application protocol within that context.

    Source: Adapted from community discussion — qz999

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-201 practice, question 41. 334 questions available.