Cisco 200-201 CCNACBR Exam Questions Instant Access

Question 1

What describes the public key infrastructure (PKI)?

APKI verifies the identity of the user and sender and creates secure communication channels using asymmetric encryption.

BPKI ensures packet loss prevention and creates secure communication channels using symmetric encryption.

CPKI verifies the identity of the user and sender and creates secure communication channels using symmetric encryption.

DPKI ensures packet loss prevention and creates secure communication channels using asymmetric encryption.

Answer : A

Question 2

What is the role of indicator of compromise in an investigation?

AIt helps answer the question of why the attack took place.

BIt identifies potentially malicious activity on a system or network.

CIt is nonforensic data, which is easy to detect.

DIt describes what and why something happened.

Answer : B

Question 3

Which piece of information is needed for attribution in an investigation?

Aproxy logs showing the source RFC 1918 IP addresses

BRDP allowed from the Internet

Cknown threat actor behavior

D802.1x RADIUS authentication pass arid fail logs

Answer : C

Cyber attribution is the process of identifying the source, motive, and methods of a cyberattack. Cyber attribution can help investigators to determine the responsibility, intent, and capability of the threat actors, as well as to prevent, deter, or respond to future attacks. One of the pieces of information that is needed for cyber attribution is known threat actor behavior, which refers to the patterns, techniques, tools, and tactics that are characteristic of a specific threat actor or group. Known threat actor behavior can help investigators to narrow down the suspects, link different incidents, and understand the objectives and strategies of the attackers.Reference:= Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) v1.0, Module 5: Security Policies and Procedures, Lesson 5.2: Incident Response, Topic 5.2.3: Cyber Attribution, page 5-14.

Question 4

Which technology prevents end-device to end-device IP traceability?

Aencryption

Bload balancing

CNAT/PAT

Dtunneling

Answer : C

NAT (Network Address Translation) and PAT (Port Address Translation) are technologies that modify the IP address information in packet headers as they pass through a router or firewall, making it difficult to trace the communication back to the originating end-device.

Question 5

How is symmetric encryption used for HTTPS connections?

AThe symmetric encryption algorithm uses public-private certificates

BEncryption is based on RSA-2048

CThe symmetric key is used for encryption

DThe key exchange process is reliable and secure

Answer : C

Question 6

An engineer must compare NIST vs ISO frameworks The engineer deeded to compare as readable documentation and also to watch a comparison video review. Using Windows 10 OS. the engineer started a browser and searched for a NIST document and then opened a new tab in the same browser and searched for an ISO document for comparison

The engineer tried to watch the video, but there 'was an audio problem with OS so the engineer had to troubleshoot it At first the engineer started CMD and looked fee a driver path then locked for a corresponding registry in the registry editor The engineer enabled "Audiosrv" in task manager and put it on auto start and the problem was solved Which two components of the OS did the engineer touch? (Choose two)

Apermissions

BPowerShell logs

Cservice

DMBR

Eprocess and thread

Answer : C, E

The engineer engaged with theservicecomponent by enabling ''Audiosrv,'' which is the Windows Audio Service responsible for managing audio for Windows-based programs. By setting it to auto-start, the engineer ensured that the service would run automatically upon system startup. Additionally, the engineer interacted withprocess and threadmanagement by using the Task Manager to modify the behavior of the ''Audiosrv'' service.

Question 7

What is an incident response plan?

Aan organizational approach to events that could lead to asset loss or disruption of operations

Ban organizational approach to security management to ensure a service lifecycle and continuous improvements

Can organizational approach to disaster recovery and timely restoration of operational services

Dan organizational approach to system backup and data archiving aligned to regulations

Answer : A

An incident response plan is a document that defines the roles and responsibilities, procedures, and processes for detecting, analyzing, containing, eradicating, recovering, and learning from security incidents. The purpose of an incident response plan is to minimize the impact of incidents on the organization's assets, operations, and reputation, and to restore normal operations as quickly as possible. An incident response plan is not the same as a security management plan, a disaster recovery plan, or a backup and archiving plan, although they may be related or complementary.Reference:=Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) - Cisco, page 92;NIST SP 800-61 Rev. 2, Computer Security Incident Handling Guide, page 2-3

Cisco Understanding Cisco Cybersecurity Operations Fundamentals 200-201 CCNACBR Exam Questions