Choose 200-201 Dumps (V16.02) for Successful Preparation – Read 200-201 CBROPS Free Dumps (Part 1, Q1-Q40) Online to Check the Quality

1. Which event is user interaction?

2. Which security principle requires more than one person is required to perform a critical task?

3. How is attacking a vulnerability categorized?

4. What is a benefit of agent-based protection when compared to agentless protection?

5. Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action?

6. One of the objectives of information security is to protect the CIA of information and systems.

What does CIA mean in this context?

7. What is rule-based detection when compared to statistical detection?

8. A user received a malicious attachment but did not run it.

Which category classifies the intrusion?

9. Which process is used when IPS events are removed to improve data integrity?

10. An analyst is investigating an incident in a SOC environment.

Which method is used to identify a session from a group of logs?

11. What is a difference between SOAR and SIEM?

12. What is the difference between mandatory access control (MAC) and discretionary access control (DAC)?

13. What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?

14. What is the virtual address space for a Windows process?

15. Which security principle is violated by running all processes as root or administrator?

16. What is the function of a command and control server?

17. What is the difference between deep packet inspection and stateful inspection?

18. Which evasion technique is a function of ransomware?

19. Refer to the exhibit.

Which two elements in the table are parts of the 5-tuple? (Choose two.)

20. DRAG DROP

Drag and drop the security concept on the left onto the example of that concept on the right.

21. What is the difference between statistical detection and rule-based detection models?

22. What is the difference between a threat and a risk?

23. Which attack method intercepts traffic on a switched network?

24. What does an attacker use to determine which network ports are listening on a potential target device?

25. What is a purpose of a vulnerability management framework?

26. A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property.

What is the threat agent in this situation?

27. What is the practice of giving an employee access to only the resources needed to accomplish their job?

28. Which metric is used to capture the level of access needed to launch a successful attack?

29. What is the difference between an attack vector and attack surface?

30. Which metric in CVSS indicates an attack that takes a destination bank account number and replaces it with a different bank account number?

31. A security specialist notices 100 HTTP GET and POST requests for multiple pages on the web servers. The agent in the requests contains PHP code that, if executed, creates and writes to a new PHP file on the webserver.

Which event category is described?

32. What specific type of analysis is assigning values to the scenario to see expected outcomes?

33. When trying to evade IDS/IPS devices, which mechanism allows the user to make the data incomprehensible without a specific key, certificate, or password?

34. Why is encryption challenging to security monitoring?

35. An employee reports that someone has logged into their system and made unapproved changes, files are out of order, and several documents have been placed in the recycle bin. The security specialist reviewed the system logs, found nothing suspicious, and was not able to determine what occurred. The software is up to date; there are no alerts from antivirus and no failed login attempts.

What is causing the lack of data visibility needed to detect the attack?

36. A company receptionist received a threatening call referencing stealing assets and did not take any action assuming it was a social engineering attempt. Within 48 hours, multiple assets were breached, affecting the confidentiality of sensitive information.

What is the threat actor in this incident?

37. What is the relationship between a vulnerability and a threat?

38. What is the principle of defense-in-depth?

39. DRAG DROP

Drag and drop the uses on the left onto the type of security system on the right.

40. What is the difference between the rule-based detection when compared to behavioral detection?