Cisco 200-201 CBROPS Exam Practice Test Instant Access

Question 1

What describes a buffer overflow attack?

Ainjecting new commands into existing buffers

Bfetching data from memory buffer registers

Coverloading a predefined amount of memory

Dsuppressing the buffers in a process

Answer : C

Question 2

What is a description of a social engineering attack?

Afake offer for free music download to trick the user into providing sensitive data

Bpackage deliberately sent to the wrong receiver to advertise a new product

Cmistakenly received valuable order destined for another person and hidden on purpose

Demail offering last-minute deals on various vacations around the world with a due date and a counter

Answer : D

Question 3

Which tool gives the ability to see session data in real time?

Atcpdstat

Btrafdump

Ctcptrace

Dtrafshow

Answer : C

Question 4

What should an engineer use to aid the trusted exchange of public keys between user tom0411976943 and dan1968754032?

Acentral key management server

Bweb of trust

Ctrusted certificate authorities

Dregistration authority data

Answer : C

Question 5

What is the difference between deep packet inspection and stateful inspection?

AStateful inspection verifies contents at Layer 4. and deep packet inspection verifies connection at Layer 7.

BStateful inspection is more secure than deep packet inspection on Layer 7.

CDeep packet inspection is more secure than stateful inspection on Layer 4.

DDeep packet inspection allows visibility on Layer 7, and stateful inspection allows visibility on Layer 4.

Answer : D

Question 6

A security engineer notices confidential data being exfiltrated to a domain "Ranso4134-mware31-895" address that is attributed to a known advanced persistent threat group The engineer discovers that the activity is part of a real attack and not a network misconfiguration. Which category does this event fall under as defined in the Cyber Kill Chain?

Areconnaissance

Bdelivery

Caction on objectives

Dweaponization

Answer : D

Question 7

An organization is cooperating with several third-party companies. Data exchange is on an unsecured channel using port 80 Internal employees use the FTP service to upload and download sensitive data An engineer must ensure confidentiality while preserving the integrity of the communication. Which technology must the engineer implement in this scenario'?

AX 509 certificates

BRADIUS server

CCA server

Dweb application firewall

Answer : A

Cisco 200-201 Understanding Cisco Cybersecurity Operations Fundamentals CBROPS Exam Practice Test