350-201 Free Practice Test

Drag and drop the type of attacks from the left onto the cyber kill chain stages at which the attacks are seen on the right.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

What is the purpose of hardening systems?

1. A. to securely configure machines to limit the attack surface
2. B. to create the logic that triggers alerts when anomalies occur
3. C. to identify vulnerabilities within an operating system
4. D. to analyze attacks to identify threat actors and points of entry

Correct Answer: A

A security expert is investigating a breach that resulted in a $32 million loss from customer accounts. Hackers were able to steal API keys and two-factor codes due to a vulnerability that was introduced in a new code a few weeks before the attack. Which step was missed that would have prevented this breach?

1. A. use of the Nmap tool to identify the vulnerability when the new code was deployed
2. B. implementation of a firewall and intrusion detection system
3. C. implementation of an endpoint protection system
4. D. use of SecDevOps to detect the vulnerability during development

Correct Answer: D

Refer to the exhibit.

An engineer is investigating a case with suspicious usernames within the active directory. After the engineer investigates and cross-correlates events from other sources, it appears that the 2 users are privileged, and their creation date matches suspicious network traffic that was initiated from the internal network 2 days prior. Which type of compromise is occurring?

1. A. compromised insider
2. B. compromised root access
3. C. compromised database tables
4. D. compromised network

Correct Answer: D

A company launched an e-commerce website with multiple points of sale through internal and external e- stores. Customers access the stores from the public website, and employees access the stores from the intranet with an SSO. Which action is needed to comply with PCI standards for hardening the systems?

1. A. Mask PAN numbers
2. B. Encrypt personal data
3. C. Encrypt access
4. D. Mask sales details

Correct Answer: B