Complete list of current Q & A>> Download Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) -Quiz 1 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 1. Which security principle is violated by running all processes as root or administrator? A. principle of least privilege B. role-based access control C. separation of duties D. trusted computing base 2 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 2. What is the virtual address space for a Windows process? A. physical location of an object in memory B. set of pages that reside in the physical memory C. system-level memory protection feature built into the operating system D. set of virtual memory addresses that can be used 3 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 3. What is the practice of giving employees only those permissions necessary to perform their specific role within an organization? A. least privilege B. need to know C. integrity validation D. due diligence 4 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 4. What is the difference between mandatory access control (MAC) and discretionary access control (DAC)? A. MAC is controlled by the discretion of the owner and DAC is controlled by an administrator B. MAC is the strictest of all levels of control and DAC is object-based access C. DAC is controlled by the operating system and MAC is controlled by an administrator D. DAC is the strictest of all levels of control and MAC is object-based access 5 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 5. What is a difference between SOAR and SIEM? A. SOAR platforms are used for threat and vulnerability management, but SIEM applications are not B. SIEM applications are used for threat and vulnerability management, but SOAR platforms are not C. SOAR receives information from a single platform and delivers it to a SIEM D. SIEM receives information from a single platform and delivers it to a SOAR 6 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 6. Which event is user interaction? A. gaining root access B. executing remote code C. reading and writing file permission D. opening a malicious file 7 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 7. Which security principle requires more than one person is required to perform a critical task? A. least privilege B. need to know C. separation of duties D. due diligence 8 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 8. How is attacking a vulnerability categorized? A. action on objectives B. delivery C. exploitation D. installation 9 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 9. What is a benefit of agent-based protection when compared to agentless protection? A. It lowers maintenance costs B. It provides a centralized platform C. It collects and detects all traffic locally D. It manages numerous devices simultaneously 10 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 10. Which principle is being followed when an analyst gathers information relevant to a security incident to determine the appropriate course of action? A. decision making B. rapid response C. data mining D. due diligence 11 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 11. One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context? A. confidentiality, identity, and authorization B. confidentiality, integrity, and authorization C. confidentiality, identity, and availability D. confidentiality, integrity, and availability 12 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 12. What is rule-based detection when compared to statistical detection? A. proof of a user's identity B. proof of a user's action C. likelihood of user's action D. falsification of a user's identity 13 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 13. An engineer configured regular expression “.*\.([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt]) HTTP/1.[01]” on Cisco ASA firewall. What does this regular expression do? A. It captures .doc, .xls, and .pdf files in HTTP v1.0 and v1.1. B. It captures documents in an HTTP network session. C. It captures Word, Excel, and PowerPoint files in HTTP v1.0 and v1.1. D. It captures .doc, .xls, and .ppt files extensions in HTTP v1.0. 14 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 14. Which process is used when IPS events are removed to improve data integrity? A. data availability B. data normalization C. data signature D. data protection 15 / 15 Category: Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) 15. An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs? A. sequence numbers B. IP identifier C. 5-tuple D. timestamps Your score is 0% Restart quiz Send feedback
