Free Cisco 200-201 Exam Dumps Questions & Answers

Which tool provides a full packet capture from network traffic?

• A.  Hydra
• B.  Nagios
• C.  Wireshark
• D.  CAINE

How is SQL injection prevented?

• A.  run the web server as a nonprivileged user
• B.  host profiling
• C.  validate and sanitize user input
• D.  address space layout randomization

Which of these describes SOC metrics in relation to security incidents?

• A.  probability of outage caused by the incident
• B.  time it takes to assess the risks of the incident
• C.  time it takes to detect the incident
• D.  probability of compromise and impact caused by the incident

A network engineer informed a security team of a large amount of traffic and suspicious activity from an unknown source to the company DMZ server. The security team reviewed the data and identified a potential DDoS attempt. According to NIST, at which phase of incident response is the security team?

• A.  preparation
• B.  detection and analysis
• C.  containment and eradication
• D.  recovery

Which attack represents the evasion technique of resource exhaustion?

• A.  bluesnarfing
• B.  denial-of-service
• C.  man-in-the-middle
• D.  SQL injection