200-201問題集260問でCyberOps Associateを確実実践 [Q47-Q67]

新問題 47
An organization has recently adjusted its security stance in response to online threats made by a known hacktivist group.
What is the initial event called in the NIST SP800-61?

新問題 48
What does an attacker use to determine which network ports are listening on a potential target device?

新問題 49
An analyst discovers that a legitimate security alert has been dismissed. Which signature caused this impact on network traffic?

新問題 50
An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture, the analyst cannot determine the technique and payload used for the communication.

Which obfuscation technique is the attacker using?

新問題 51
What is a collection of compromised machines that attackers use to carry out a DDoS attack?

新問題 52
How is NetFlow different than traffic mirroring?

新問題 53
Refer to the exhibit. What does this output indicate?

新問題 54
Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?

新問題 55
What is a difference between SOAR and SIEM?

新問題 56
What is a difference between signature-based and behavior-based detection?

新問題 57
Which are two denial-of-service attacks? (Choose two.)

新問題 58
What ate two denial-of-service (DoS) attacks? (Choose two)

新問題 59
Refer to the exhibit.

What should be interpreted from this packet capture?

新問題 60
Which system monitors local system operation and local network access for violations of a security policy?

新問題 61
What is a difference between SIEM and SOAR?

新問題 62
What is the difference between deep packet inspection and stateful inspection?

新問題 63
Refer to the exhibit.

Which packet contains a file that is extractable within Wireshark?

新問題 64
Refer to the exhibit.

Which packet contains a file that is extractable within Wireshark?

新問題 65
An organization is cooperating with several third-party companies. Data exchange is on an unsecured channel using port 80 Internal employees use the FTP service to upload and download sensitive data An engineer must ensure confidentiality while preserving the integrity of the communication. Which technology must the engineer implement in this scenario’?

新問題 66
Refer to the exhibit.

What is depicted in the exhibit?

新問題 67
A company encountered a breach on its web servers using IIS 7 5 Dunng the investigation, an engineer discovered that an attacker read and altered the data on a secure communication using TLS 1 2 and intercepted sensitive information by downgrading a connection to export-grade cryptography. The engineer must mitigate similar incidents in the future and ensure that clients and servers always negotiate with the most secure protocol versions and cryptographic parameters. Which action does the engineer recommend?