Continue to Read the 200-201 Free Dumps (Part 2, Q41-Q80) to Verify the 200-201 Dumps (V17.02): Secure Your Exam Career

1. Which regular expression matches "color" and "colour"?

2. What is the difference between deep packet inspection and stateful inspection?

3. What is a purpose of a vulnerability management framework?

4. What is the function of a command and control server?

5. Refer to the exhibit.

This request was sent to a web application server driven by a database.

Which type of web server attack is represented?

6. What is a sandbox interprocess communication service?

7. Which piece of information is needed for attribution in an investigation?

8. 1.Which event is user interaction?

9. Which system monitors local system operation and local network access for violations of a security policy?

10. What does an attacker use to determine which network ports are listening on a potential target device?

11. How does an attacker observe network traffic exchanged between two users?

12. A SOC analyst is investigating an incident that involves a Linux system that is identifying specific sessions.

Which identifier tracks an active program?

13. At which layer is deep packet inspection investigated on a firewall?

14. An analyst discovers that a legitimate security alert has been dismissed.

Which signature caused this impact on network traffic?

15. Which two pieces of information are collected from the IPv4 protocol header? (Choose two.)

16. Which evasion technique is indicated when an intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources?

17. Which artifact is used to uniquely identify a detected file?

18. Which metric in CVSS indicates an attack that takes a destination bank account number and replaces it with a different bank account number?

19. What is the difference between the rule-based detection when compared to behavioral detection?

20. Refer to the exhibit.

Which application protocol is in this PCAP file?

21. Which security principle requires more than one person is required to perform a critical task?

22. An analyst received an alert on their desktop computer showing that an attack was successful on the host. After investigating, the analyst discovered that no mitigation action occurred during the attack.

What is the reason for this discrepancy?

23. A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property.

What is the threat agent in this situation?

24. Which type of data collection requires the largest amount of storage space?

25. Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?

26. Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?

27. An employee reports that someone has logged into their system and made unapproved changes, files are out of order, and several documents have been placed in the recycle bin. The security specialist reviewed the system logs, found nothing suspicious, and was not able to determine what occurred. The software is up to date; there are no alerts from antivirus and no failed login attempts.

What is causing the lack of data visibility needed to detect the attack?

28. Which HTTP header field is used in forensics to identify the type of browser used?

29. Refer to the exhibit.

In which Linux log file is this output found?

30. Refer to the exhibit.

What information is depicted?

31. How does certificate authority impact a security system?

32. What is the difference between a threat and a risk?

33. An analyst is exploring the functionality of different operating systems.

What is a feature of Windows Management Instrumentation that must be considered when deciding on an operating system?

34. DRAG DROP

Drag and drop the security concept on the left onto the example of that concept on the right.

35. Which attack method intercepts traffic on a switched network?

36. Which action prevents buffer overflow attacks?

37. What are two social engineering techniques? (Choose two.)

38. How does an SSL certificate impact security between the client and the server?

39. A malicious file has been identified in a sandbox analysis tool.

Which piece of information is needed to search for additional downloads of this file by other hosts?

40. What is the difference between statistical detection and rule-based detection models?