200-201 Free Practice Test

An engineer is analyzing a recent breach where confidential documents were altered and stolen by the receptionist Further analysis shows that the threat actor connected an externa USB device to bypass security restrictions and steal data The engineer could not find an external USB device Which piece of information must an engineer use for attribution in an investigation?

1. A. list of security restrictions and privileges boundaries bypassed
2. B. external USB device
3. C. receptionist and the actions performed
4. D. stolen data and its criticality assessment

Correct Answer: C

Refer to the exhibit.

An engineer is analyzing a PCAP file after a recent breach An engineer identified that the attacker used an aggressive ARP scan to scan the hosts and found web and SSH servers. Further analysis showed several SSH Server Banner and Key Exchange Initiations. The engineer cannot see the exact data being transmitted over an encrypted channel and cannot identify how the attacker gained access How did the attacker gain access?

1. A. by using the buffer overflow in the URL catcher feature for SSH
2. B. by using an SSH Tectia Server vulnerability to enable host-based authentication
3. C. by using an SSH vulnerability to silently redirect connections to the local host
4. D. by using brute force on the SSH service to gain access

Correct Answer: C

Refer to the exhibit.

In which Linux log file is this output found?

1. A. /var/log/authorization.log
2. B. /var/log/dmesg
3. C. var/log/var.log
4. D. /var/log/auth.log

Correct Answer: D

Refer to the exhibit.

A workstation downloads a malicious docx file from the Internet and a copy is sent to FTDv. The FTDv sends the file hash to FMC and the tile event is recorded What would have occurred with stronger data visibility?

1. A. The traffic would have been monitored at any segment in the network.
2. B. Malicious traffic would have been blocked on multiple devices
3. C. An extra level of security would have been in place
4. D. Detailed information about the data in real time would have been provided

Correct Answer: B

What specific type of analysis is assigning values to the scenario to see expected outcomes?

1. A. deterministic
2. B. exploratory
3. C. probabilistic
4. D. descriptive

Correct Answer: A