200-201 無料問題集「Cisco Understanding Cisco Cybersecurity Operations Fundamentals」

（A）RDP allowed from the Internet

（B）proxy logs showing the source RFC 1918 IP addresses

（C）802.1x RADIUS authentication pass arid fail logs

（D）known threat actor behavior

（A）macros for managing CPU sets

（B）new process created by parent process

（C）process spawn scheduled

（D）parent directory name of a file pathname

（A）circumstantial

（B）indirect

（C）best

（D）corroborative

（A）Hardware Security Module

（B）Automated Certificate Management Environment

（C）Pretty Good Privacy

（D）Secure Multipurpose Internet Mail Extensions

（A）A collection of interfaces that allow for coordination of activities among processes.

（B）A collection of host services that allow for communication between sandboxes.

（C）A collection of rules within the sandbox that prevent the communication between sandboxes.

（D）A collection of network services that are activated on an interface, allowing for inter-port communication.

（A）easier to manage due to the centralized platform

（B）monitors and detects traffic locally

（C）lower resource requirements during implementation

（D）manages unlimited devices simultaneously

（A）full packet captures at the endpoint

（B）load balancing

（C）secure boot

（D）restricting USB ports

（E）increased audit log levels

（A）allowing specific format files and deny executable files

（B）allowing everything and denying specific executable files

（C）allowing everything and denying specific applications protocols

（D）allowing specific files and deny everything else

（A）An attack surface identifies vulnerable parts for an attack, and an attack vector specifies which attacks are feasible to those parts.

（B）An attack vector recognizes the potential outcomes of an attack, and the attack surface is choosing a method of an attack.

（C）An attack surface mitigates external vulnerabilities, and an attack vector identifies mitigation techniques and possible workarounds.

（D）An attack vector matches components that can be exploited, and an attack surface classifies the potential path for exploitation

（A）zero-day vulnerabilities

（B）malicious web scripts

（C）viruses

（D）unwanted traffic

（A）false positive

（B）false negative

（C）true positive

（D）true negative

（A）Statistical detection defines legitimate data over time, and rule-based detection works on a predefined set of rules

（B）Statistical detection involves the evaluation of events, and rule-based detection requires an evaluated set of events to function.

（C）legitimate data over a period of time, and statistical detection works on a predefined set of rules

（D）Rule-based detection involves the evaluation of events, and statistical detection requires an evaluated set of events to function Rule-based detection defines

（A）An attack surface identifies vulnerabilities that require user input or validation; and an attack vector identifies vulnerabilities that are independent of user actions.

（B）An attack vector identifies components that can be exploited, and an attack surface identifies the potential path an attack can take to penetrate the network.

（C）An attack vector identifies the potential outcomes of an attack; and an attack surface launches an attack using several methods against the identified vulnerabilities.

（D）An attack surface recognizes which network parts are vulnerable to an attack; and an attack vector identifies which attacks are possible with these vulnerabilities.

（A）data masking

（B）proxied traffic

（C）C&C connection

（D）DNS tunneling