[Oct 22, 2021] Latest 350-201 Exam with Accurate Performing CyberOps Using Cisco Security Technologies PDF Questions
Practice To 350-201 - Exams4Collection Remarkable Practice On your Performing CyberOps Using Cisco Security Technologies Exam
NEW QUESTION 69
A company's web server availability was breached by a DDoS attack and was offline for 3 hours because it was not deemed a critical asset in the incident response playbook. Leadership has requested a risk assessment of the asset. An analyst conducted the risk assessment using the threat sources, events, and vulnerabilities. Which additional element is needed to calculate the risk?
- A. event severity and likelihood
- B. assessment scope
- C. incident response playbook
- D. risk model framework
Answer: D
NEW QUESTION 70
Refer to the exhibit.
How must these advisories be prioritized for handling?
- A. Vulnerability #1 is the highest priority for every type of institution
- B. Vulnerability #2 is the highest priority for every type of institution
- C. Vulnerability #1 and vulnerability #2 have the same priority
- D. The highest priority for handling depends on the type of institution deploying the devices
Answer: A
NEW QUESTION 71
Refer to the exhibit.
A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?
- A. Reduce the amount of data that can be fetched from the total pool of active clients that call the API
- B. Limit the number of API calls that a single client is allowed to make
- C. Add restrictions on the edge router on how often a single client can access the API
- D. Increase the application cache of the total pool of active clients that call the API
Answer: B
NEW QUESTION 72
Refer to the exhibit.
Which code snippet will parse the response to identify the status of the domain as malicious, clean or undefined?
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
NEW QUESTION 73
A threat actor has crafted and sent a spear-phishing email with what appears to be a trustworthy link to the site of a conference that an employee recently attended. The employee clicked the link and was redirected to a malicious site through which the employee downloaded a PDF attachment infected with ransomware. The employee opened the attachment, which exploited vulnerabilities on the desktop. The ransomware is now installed and is calling back to its command and control server. Which security solution is needed at this stage to mitigate the attack?
- A. web security solution
- B. network security solution
- C. email security solution
- D. endpoint security solution
Answer: B
NEW QUESTION 74
Refer to the exhibit.
An engineer is performing static analysis of a file received and reported by a user. Which risk is indicated in this STIX?
- A. The file is redirecting users to a website that requests privilege escalations from the user.
- B. The file is redirecting users to a website that harvests cookies and stored account information.
- C. The file is redirecting users to a website that is determining users' geographic location.
- D. The file is redirecting users to the website that is downloading ransomware to encrypt files.
Answer: C
NEW QUESTION 75
An engineer is utilizing interactive behavior analysis to test malware in a sandbox environment to see how the malware performs when it is successfully executed. A location is secured to perform reverse engineering on a piece of malware. What is the next step the engineer should take to analyze this malware?
- A. Disassemble the malware to understand how it was constructed
- B. Run the program through a debugger to see the sequential actions
- C. Unpack the file in a sandbox to see how it reacts
- D. Research the malware online to see if there are noted findings
Answer: D
NEW QUESTION 76 
Refer to the exhibit. An engineer received a report that an attacker has compromised a workstation and gained access to sensitive customer data from the network using insecure protocols. Which action prevents this type of attack in the future?
- A. Deploy IDS within sensitive areas and continuously update signatures
- B. Use VLANs to segregate zones and the firewall to allow only required services and secured protocols
- C. Use syslog to gather data from multiple sources and detect intrusion logs for timely responses
- D. Deploy a SOAR solution and correlate log alerts from customer zones
Answer: B
NEW QUESTION 77
A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)
- A. report of staff members with asset relations
- B. malware analysis report
- C. key assets and executives
- D. asset vulnerability assessment
- E. incident response playbooks
Answer: B,D
NEW QUESTION 78
A security architect is working in a processing center and must implement a DLP solution to detect and prevent any type of copy and paste attempts of sensitive data within unapproved applications and removable devices. Which technical architecture must be used?
- A. DLP for removable data
- B. DLP for data in motion
- C. DLP for data in use
- D. DLP for data at rest
Answer: C
NEW QUESTION 79
An engineer is going through vulnerability triage with company management because of a recent malware outbreak from which 21 affected assets need to be patched or remediated. Management decides not to prioritize fixing the assets and accepts the vulnerabilities. What is the next step the engineer should take?
- A. Investigate the vulnerability to prevent further spread
- B. Acknowledge the vulnerabilities and document the risk
- C. Apply vendor patches or available hot fixes
- D. Isolate the assets affected in a separate network
Answer: D
NEW QUESTION 80
An engineer has created a bash script to automate a complicated process. During script execution, this error occurs: permission denied. Which command must be added to execute this script?
- A. chmod +x ex.sh
- B. source ex.sh
- C. chroot ex.sh
- D. sh ex.sh
Answer: A
Explanation:
Explanation/Reference: https://www.redhat.com/sysadmin/exit-codes-demystified
NEW QUESTION 81
Refer to the exhibit.
An engineer configured this SOAR solution workflow to identify account theft threats and privilege escalation, evaluate risk, and respond by resolving the threat. This solution is handling more threats than Security analysts have time to analyze. Without this analysis, the team cannot be proactive and anticipate attacks. Which action will accomplish this goal?
- A. Exclude the step "Check for GeoIP location" to allow analysts to analyze the location and the associated risk based on asset criticality
- B. Include a step "Reporting" to alert the security department of threats identified by the SOAR reporting engine
- C. Include a step "Take a Snapshot" to capture the endpoint state to contain the threat for analysis
- D. Exclude the step "BAN malicious IP" to allow analysts to conduct and track the remediation
Answer: D
NEW QUESTION 82
Drag and drop the actions below the image onto the boxes in the image for the actions that should be taken during this playbook step. Not all options are used.
Answer:
Explanation:
NEW QUESTION 83
A cloud engineer needs a solution to deploy applications on a cloud without being able to manage and control the server OS. Which type of cloud environment should be used?
- A. IaaS
- B. DaaS
- C. SaaS
- D. PaaS
Answer: A
NEW QUESTION 84
Refer to the exhibit.
Where does it signify that a page will be stopped from loading when a scripting attack is detected?
- A. x-content-type-options
- B. x-test-debug
- C. x-xss-protection
- D. x-frame-options
Answer: C
NEW QUESTION 85
Refer to the exhibit.
Which command was executed in PowerShell to generate this log?
- A. Get-EventLog -List
- B. Get-EventLog -LogName*
- C. Get-WinEvent -ListLog*
- D. Get-WinEvent -ListLog* -ComputerName localhost
Answer: B
NEW QUESTION 86
Refer to the exhibit. Which asset has the highest risk value?
- A. payment process
- B. website
- C. secretary workstation
- D. servers
Answer: A
NEW QUESTION 87
A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company's infrastructure. Which steps should an engineer take at the recovery stage?
- A. Identify the attack vector and update the IDS signature list
- B. Determine the systems involved and deploy available patches
- C. Review access lists and require users to increase password complexity
- D. Analyze event logs and restrict network access
Answer: D
NEW QUESTION 88
Which bash command will print all lines from the "colors.txt" file containing the non case-sensitive pattern "Yellow"?
- A. locate "yellow" colors.txt
- B. grep "Yellow" colors.txt
- C. locate -i "Yellow" colors.txt
- D. grep -i "yellow" colors.txt
Answer: D
NEW QUESTION 89
Refer to the exhibit.
Where are the browser page rendering permissions displayed?
- A. Cache-Control
- B. X-Frame-Options
- C. X-XSS-Protection
- D. Content-Type
Answer: D
NEW QUESTION 90
......
Exam Questions and Answers for 350-201 Study Guide Questions and Answers!: https://www.exams4collection.com/350-201-latest-braindumps.html
Practice To 350-201 - Exams4Collection Remarkable Practice On your Performing CyberOps Using Cisco Security Technologies Exam: https://drive.google.com/open?id=1DYj-SYuCV_-lU2PQjCCNJznLZOykTESw
