2023 Best 200-201 Exam Preparation Material with New Dumps Questions [Q49-Q67]

QUESTION 49
Which system monitors local system operation and local network access for violations of a security policy?

QUESTION 50
What is a benefit of agent-based protection when compared to agentless protection?

QUESTION 51

Refer to the exhibit. Which type of log is displayed?

QUESTION 52
Refer to the exhibit.

What is depicted in the exhibit?

QUESTION 53
Refer to the exhibit.

An engineer is analyzing this Cuckoo Sandbox report for a PDF file that has been downloaded from an email. What is the state of this file?

QUESTION 54
What is a description of a social engineering attack?

QUESTION 55
At a company party a guest asks questions about the company’s user account format and password complexity.
How is this type of conversation classified?

QUESTION 56
Which action should be taken if the system is overwhelmed with alerts when false positives and false negatives are compared?

QUESTION 57
An organization’s security team has detected network spikes coming from the internal network. An investigation has concluded that the spike in traffic was from intensive network scanning How should the analyst collect the traffic to isolate the suspicious host?

QUESTION 58
Which tool gives the ability to see session data in real time?

QUESTION 59
Drag and drop the event term from the left onto the description on the right.

QUESTION 60
Which incidence response step includes identifying all hosts affected by an attack?

QUESTION 61
One of the objectives of information security is to protect the CIA of information and systems.
What does CIA mean in this context?

QUESTION 62
A system administrator is ensuring that specific registry information is accurate.
Which type of configuration information does the HKEY_LOCAL_MACHINE hive contain?

QUESTION 63
Which two elements are assets in the role of attribution in an investigation? (Choose two.)

QUESTION 64
A user received a malicious attachment but did not run it. Which category classifies the intrusion?

QUESTION 65
A user received a malicious attachment but did not run it.
Which category classifies the intrusion?

QUESTION 66
An analyst discovers that a legitimate security alert has been dismissed. Which signature caused this impact on network traffic?

QUESTION 67
An engineer is working with the compliance teams to identify the data passing through the network. During analysis, the engineer informs the compliance team that external penmeter data flows contain records, writings, and artwork Internal segregated network flows contain the customer choices by gender, addresses, and product preferences by age. The engineer must identify protected data. Which two types of data must be identified’? (Choose two.)