Free Cisco 200-201 Practice Exam with Questions & Answers | Set: 5

A vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

A threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

A vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

A threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.

The ACK flag validates the receipt of the previous packet in the stream, and the same session is being closed by the RST flag.

The ACK flag validates the next packets to be sent to a destination, and the RST flag is what the RST returns to indicate that the destination is reachable.

The RST flag identifies the connection as reliable and trustworthy within the handshake process, and the ACK flag prepares a response by opening a session between the source and destination.

The RST flag establishes the communication, and the ACK flag cancels spontaneous connections that were not specifically sent to the expecting host.

MAC is controlled by the discretion of the owner and DAC is controlled by an administrator

MAC is the strictest of all levels of control and DAC is object-based access

DAC is controlled by the operating system and MAC is controlled by an administrator

DAC is the strictest of all levels of control and MAC is object-based access

indirect and corroborative

direct and corroborative

circumstantial and direct

corroborative and substantive

mandatory access control, due to automate scaling

discretionary access control due to easy maintenance

discretionary access control, due to high security

mandatory access control, due to low granularity

The system detected an XSS attack

Someone is trying a brute force attack on the network

Another device is gaining root access to the system

A privileged user successfully logged into the system

HTTPS ports are open on the server.

SMB ports are closed on the server.

FTP ports are open on the server.

Email ports are closed on the server.

The threat actor used a dictionary-based password attack to obtain credentials.

The threat actor gained access to the system by known credentials.

The threat actor used the teardrop technique to confuse and crash login services.

The threat actor used an unknown vulnerability of the operating system that went undetected.

true negative

false negative

false positive

true positive

Identifying possible malware communications and botnet activity

Monitoring of encrypted and unencrypted web sessions for diagnostics.

Analysis of traffic flows during network capacity testing

Review of session logs for performance optimization in a distributed application environment