Free Cisco 200-201 Exam Dumps Questions & Answers

Refer to the exhibit.

An engineer is analyzing this Cuckoo Sandbox report for a PDF file that has been downloaded from an email. What is the state of this file?

• A.  The file has an embedded non-Windows executable but no suspicious features are identified.
• B.  The file has an embedded Windows 32 executable and the Yara field lists suspicious features for further analysis.
• C.  The file was matched by PEiD threat signatures but no suspicious features are identified since the signature list is up to date.
• D.  The file has an embedded executable and was matched by PEiD threat signatures for further analysis.

How is symmetric encryption used for HTTPS connections?

• A.  The symmetric key is used for encryption
• B.  The symmetric encryption algorithm uses public-private certificates
• C.  Encryption is based on RSA-2048
• D.  The key exchange process is reliable and secure

What is the difference between a threat and a risk?

• A.  Risk represents the known and identified loss or danger in the system
• B.  Threat represents a state of being exposed to an attack or a compromise, either physically or logically.
• C.  Threat represents a potential danger that could take advantage of a weakness in a system
• D.  Risk represents the nonintentional interaction with uncertainty in the system

An engineer received an alert affecting the degraded performance of a critical server Analysis showed a heavy CPU and memory load What is the next step the engineer should take to investigate this resource usage7

• A.  Run "ps -u" to find out who executed additional processes that caused a high load on a server
• B.  Run "ps -ef to understand which processes are taking a high amount of resources
• C.  Run "ps -m" to capture the existing state of daemons and map the required processes to find the gap
• D.  Run "ps -d" to decrease the priority state of high-load processes to avoid resource exhaustion

How does an attacker observe network traffic exchanged between two users?

• A.  command injection
• B.  man-in-the-middle
• C.  port scanning
• D.  denial of service