Cisco 200-201 CCNACBR Exam Questions Instant Access

Question 1

What is a difference between a threat and a vulnerability?

AA vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

BA threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

CA vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

DA threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.

Answer : B

Question 2

A software development company develops high-end technology for the customer that will go through the HIPAA audit program. The technology will be hosted in the cloud, and the healthcare, employee names, and contact information will be stored on two separate logically isolated private cloud services. The patents and inventions will be hosted on a separate encrypted database. A compliance team is asked to analyze the cloud infrastructure and architecture to identify the protected data. Which two types of protected data should be identified? (Choose two.)

AFederated Identity ID (FII)

BProtected Health Information (PHI)

CPersonally Identifiable Information (PII)

DPayment Card Industry (PCI)

ESelf-sovereign Identity (SSI)

Answer : B, C

Question 3

Refer to the exhibit.

What is occurring within the exhibit?

Aregular GET requests

BXML External Entities attack

Cinsecure deserialization

Dcross-site scripting attack

Answer : A

Based on the image details, the exhibit shows a series of HTTP requests with the method GET, which are used to retrieve data from a web server. There is no evidence of any malicious payload or parameter in these requests, so they are likely regular GET requests. The other options are types of web application attacks that exploit different vulnerabilities, such as XML External Entities, insecure deserialization, and cross-site scripting.Reference:=Cisco Cybersecurity

https://github.com/gwroblew/detectXSSlib/blob/master/test/attacks.txt

Question 4

What is a disadvantage of the asymmetric encryption system?

AIt is slow compared to the symmetric encryption system.

BAsymmetric encryption is used to transfer the data, and symmetric is used to encrypt small chunks of data.

CAsymmetric encryption is an old technique, and symmetric encryption is the newer one.

DIt is less secure because it uses a single key for encryption.

Answer : A

Question 5

Which items is an end-point application greylist used?

AItems that have been established as malicious

BItems that have been established as authorized

CItems that have been installed with a baseline

DItems before being established as harmful or malicious

Answer : D

A greylist in endpoint applications refers to a list of items that are not yet classified as either good (whitelisted) or bad (blacklisted).

The primary function of a greylist is to hold applications, processes, or files that are under observation due to their unknown status.

These items are neither trusted nor immediately flagged as harmful, allowing security teams to monitor them closely for any suspicious behavior.

By placing items on a greylist, security operations can prevent potential threats without disrupting legitimate processes, awaiting further analysis to determine their true nature.

Reference

Cisco Cybersecurity Operations Fundamentals

Endpoint Security Best Practices

Greylisting Concepts in Cybersecurity

Question 6

Which data format is the most efficient to build a baseline of traffic seen over an extended period of time?

Asyslog messages

Bfull packet capture

CNetFlow

Dfirewall event logs

Answer : C

NetFlow provides a more efficient way of recording and analyzing network traffic patterns over an extended period of time compared to syslog messages, full packet capture, or firewall event logs. It collects metadata about traffic flows traversing the network devices which can be used for understanding normal baseline behavior as well as identifying anomalies.Reference:=Cisco Certified CyberOps Associate Overview

Question 7

An employee of a company receives an email with an attachment. They notice that this email is from a suspicious source, and they decide not to open the attached file. After further investigation, a security analyst concludes that this file is malware. To which category of the Cyber Kill Chain model does this event belong?

AWeaponization

BInstallation

CExploitation

DDelivery

Answer : D

Cisco Understanding Cisco Cybersecurity Operations Fundamentals 200-201 CCNACBR Exam Questions