Question 1

What is a purpose of a vulnerability management framework?

Accepted Answer

A)  identifies, removes, and mitigates system vulnerabilities 
B)  detects and removes vulnerabilities in source code 
C)  conducts vulnerability scans on the network 
D)  manages a list of reported vulnerabilities 
A)  identifies, removes, and mitigates system vulnerabilities 
B)  detects and removes vulnerabilities in source code 
C)  conducts vulnerability scans on the network 
D)  manages a list of reported vulnerabilities

Question 2

How does an SSL certificate impact security between the client and the server?

Accepted Answer

A)  by enabling an authenticated channel between the client and the server 
B)  by creating an integrated channel between the client and the server 
C)  by enabling an authorized channel between the client and the server 
D)  by creating an encrypted channel between the client and the server 
A)  by enabling an authenticated channel between the client and the server 
B)  by creating an integrated channel between the client and the server 
C)  by enabling an authorized channel between the client and the server 
D)  by creating an encrypted channel between the client and the server

Question 3

What is the difference between a threat and a risk?

Accepted Answer

A)  Threat represents a potential danger that could take advantage of a weakness in a system 
B)  Risk represents the known and identified loss or danger in the system 
C)  Risk represents the nonintentional interaction with uncertainty in the system 
D)  Threat represents a state of being exposed to an attack or a compromise either physically or logically 
A)  Threat represents a potential danger that could take advantage of a weakness in a system 
B)  Risk represents the known and identified loss or danger in the system 
C)  Risk represents the nonintentional interaction with uncertainty in the system 
D)  Threat represents a state of being exposed to an attack or a compromise either physically or logically

Question 4

Which signature impacts network traffic by causing legitimate traffic to be blocked?

Accepted Answer

A)  false negative 
B)  true positive 
C)  true negative 
D)  false positive 
A)  false negative 
B)  true positive 
C)  true negative 
D)  false positive

Question 5

One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context?

Accepted Answer

A)  confidentiality, identity, and authorization 
B)  confidentiality, integrity, and authorization 
C)  confidentiality, identity, and availability 
D)  confidentiality, integrity, and availability 
A)  confidentiality, identity, and authorization 
B)  confidentiality, integrity, and authorization 
C)  confidentiality, identity, and availability 
D)  confidentiality, integrity, and availability

Question 6

Refer to the exhibit. Which application protocol is in this PCAP file?

Accepted Answer

A)  SSH 
B)  TCP 
C)  TLS 
D)  HTTP 
A)  SSH 
B)  TCP 
C)  TLS 
D)  HTTP

Question 7

What is the difference between the rule-based detection when compared to behavioral detection?

Accepted Answer

A)  Rule-Based detection is searching for patterns linked to specific types of attacks, while behavioral is identifying per signature. 
B)  Rule-Based systems have established patterns that do not change with new data, while behavioral changes. 
C)  Behavioral systems are predefined patterns from hundreds of users, while Rule-Based only flags potentially abnormal patterns using signatures. 
D)  Behavioral systems find sequences that match a particular attack signature, while Rule-Based identifies potential attacks. 
A)  Rule-Based detection is searching for patterns linked to specific types of attacks, while behavioral is identifying per signature. 
B)  Rule-Based systems have established patterns that do not change with new data, while behavioral changes. 
C)  Behavioral systems are predefined patterns from hundreds of users, while Rule-Based only flags potentially abnormal patterns using signatures. 
D)  Behavioral systems find sequences that match a particular attack signature, while Rule-Based identifies potential attacks.

Question 8

Refer to the exhibit. What does the output indicate about the server with the IP address 172.18.104.139?

Accepted Answer

A)  open ports of a web server 
B)  open port of an FTP server 
C)  open ports of an email server 
D)  running processes of the server 
A)  open ports of a web server 
B)  open port of an FTP server 
C)  open ports of an email server 
D)  running processes of the server

Question 9

Which utility blocks a host portscan?

Accepted Answer

A)  HIDS 
B)  sandboxing 
C)  host-based firewall 
D)  antimalware 
A)  HIDS 
B)  sandboxing 
C)  host-based firewall 
D)  antimalware

Question 10

What is the difference between an attack vector and attack surface?

Accepted Answer

A)  An attack surface identifies vulnerabilities that require user input or validation; and an attack vector identifies vulnerabilities that are independent of user actions. 
B)  An attack vector identifies components that can be exploited; and an attack surface identifies the potential path an attack can take to penetrate the network. 
C)  An attack surface recognizes which network parts are vulnerable to an attack; and an attack vector identifies which attacks are possible with these vulnerabilities. 
D)  An attack vector identifies the potential outcomes of an attack; and an attack surface launches an attack using several methods against the identified vulnerabilities. 
A)  An attack surface identifies vulnerabilities that require user input or validation; and an attack vector identifies vulnerabilities that are independent of user actions. 
B)  An attack vector identifies components that can be exploited; and an attack surface identifies the potential path an attack can take to penetrate the network. 
C)  An attack surface recognizes which network parts are vulnerable to an attack; and an attack vector identifies which attacks are possible with these vulnerabilities. 
D)  An attack vector identifies the potential outcomes of an attack; and an attack surface launches an attack using several methods against the identified vulnerabilities.

Question 11

What are the two characteristics of the full packet captures? (Choose two.)

Accepted Answer

A)  Identifying network loops and collision domains. 
B)  Troubleshooting the cause of security and performance issues. 
C)  Reassembling fragmented traffic from raw data. 
D)  Detecting common hardware faults and identify faulty assets. 
E)  Providing a historical record of a network transaction. 
A)  Identifying network loops and collision domains. 
B)  Troubleshooting the cause of security and performance issues. 
C)  Reassembling fragmented traffic from raw data. 
D)  Detecting common hardware faults and identify faulty assets. 
E)  Providing a historical record of a network transaction.

Question 12

Which metric in CVSS indicates an attack that takes a destination bank account number and replaces it with a different bank account number?

Accepted Answer

A)  integrity 
B)  confidentiality 
C)  availability 
D)  scope 
A)  integrity 
B)  confidentiality 
C)  availability 
D)  scope

Question 13

Which security technology guarantees the integrity and authenticity of all messages transferred to and from a web application?

Accepted Answer

A)  Hypertext Transfer Protocol 
B)  SSL Certificate 
C)  Tunneling 
D)  VPN 
A)  Hypertext Transfer Protocol 
B)  SSL Certificate 
C)  Tunneling 
D)  VPN

Question 14

What is the principle of defense-in-depth?

Accepted Answer

A)  Agentless and agent-based protection for security are used. 
B)  Several distinct protective layers are involved. 
C)  Access control models are involved. 
D)  Authentication, authorization, and accounting mechanisms are used. 
A)  Agentless and agent-based protection for security are used. 
B)  Several distinct protective layers are involved. 
C)  Access control models are involved. 
D)  Authentication, authorization, and accounting mechanisms are used.

Question 15

Which regular expression matches "color" and "colour"?

Accepted Answer

A)  colo?ur 
B)  col[0?8]+our 
C)  colou?r 
D)  col[0?9]+our 
A)  colo?ur 
B)  col[0?8]+our 
C)  colou?r 
D)  col[0?9]+our

Question 16

Which type of data collection requires the largest amount of storage space?

Accepted Answer

A)  alert data 
B)  transaction data 
C)  session data 
D)  full packet capture 
A)  alert data 
B)  transaction data 
C)  session data 
D)  full packet capture

Question 17

How is NetFlow different than traffic mirroring?

Accepted Answer

A)  NetFlow collects metadata and traffic mirroring clones data 
B)  Traffic mirroring impacts switch performance and NetFlow does not 
C)  Traffic mirroring costs less to operate than NetFlow 
D)  NetFlow generates more data than traffic mirroring 
A)  NetFlow collects metadata and traffic mirroring clones data 
B)  Traffic mirroring impacts switch performance and NetFlow does not 
C)  Traffic mirroring costs less to operate than NetFlow 
D)  NetFlow generates more data than traffic mirroring

Question 18

What is the practice of giving an employee access to only the resources needed to accomplish their job?

Accepted Answer

A)  principle of least privilege 
B)  organizational separation 
C)  separation of duties 
D)  need to know principle 
A)  principle of least privilege 
B)  organizational separation 
C)  separation of duties 
D)  need to know principle

Question 19

Which two elements are used for profiling a network? (Choose two.)

Accepted Answer

A)  session duration 
B)  total throughput 
C)  running processes 
D)  listening ports 
E)  OS fingerprint 
A)  session duration 
B)  total throughput 
C)  running processes 
D)  listening ports 
E)  OS fingerprint

Question 20

Refer to the exhibit. What is occurring in this network traffic?

Accepted Answer

A)  high rate of SYN packets being sent from a multiple source towards a single destination IP 
B)  high rate of SYN packets being sent from a single source IP towards multiple destination IPs 
C)  flood of ACK packets coming from a single source IP to multiple destination IPs 
D)  flood of SYN packets coming from a single source IP to a single destination IP 
A)  high rate of SYN packets being sent from a multiple source towards a single destination IP 
B)  high rate of SYN packets being sent from a single source IP towards multiple destination IPs 
C)  flood of ACK packets coming from a single source IP to multiple destination IPs 
D)  flood of SYN packets coming from a single source IP to a single destination IP

Exam 3: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

What is a purpose of a vulnerability management framework?

How does an SSL certificate impact security between the client and the server?

What is the difference between a threat and a risk?

Which signature impacts network traffic by causing legitimate traffic to be blocked?

One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context?

Refer to the exhibit. Which application protocol is in this PCAP file?

What is the difference between the rule-based detection when compared to behavioral detection?

Refer to the exhibit. What does the output indicate about the server with the IP address 172.18.104.139?

Which utility blocks a host portscan?

What is the difference between an attack vector and attack surface?

What are the two characteristics of the full packet captures? (Choose two.)

Which metric in CVSS indicates an attack that takes a destination bank account number and replaces it with a different bank account number?

Which security technology guarantees the integrity and authenticity of all messages transferred to and from a web application?

What is the principle of defense-in-depth?

Which regular expression matches "color" and "colour"?

Which type of data collection requires the largest amount of storage space?

How is NetFlow different than traffic mirroring?

What is the practice of giving an employee access to only the resources needed to accomplish their job?

Which two elements are used for profiling a network? (Choose two.)

Refer to the exhibit. What is occurring in this network traffic?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters