CBROPS 200-201 Practice Questions & Answers • ExamPrepare

Question 1

Refer to the exhibit. Based on the .pcap file, which protocol's vulnerability has been exploited to establish a session?

TCP
SMB
Negotiate
IP

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Which statement describes threat hunting?

It is an activity by an entity to deliberately bring down critical internal servers.
It includes any activity that might go after competitors and adversaries to infiltrate their systems.
It is a prevention activity to detect signs of intrusion, compromise, data theft, abnormalities, or malicious activity.
It is a vulnerability assessment conducted by cyber professionals.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

Refer to the exhibit. What is the logical source device for the events?

NetFlow collector
web server
IDS/IPS
proxy server

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

Which evasion method is being used when TLS is observed between two endpoints?

encryption
obfuscation
X.509 certificate authentication
traffic insertion

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

What is the impact of encryption?

Data is secure and unreadable without decrypting it.
Data is unaltered and its integrity is preserved.
Data is accessible and available to permitted individuals.
Confidentiality of the data is kept secure and permissions are validated.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Refer to the exhibit. An engineer is analyzing this Cuckoo Sandbox report for a PDF file that has been downloaded from an email. What is the state of this file?

The file has an embedded non-Windows executable, but no suspicious features are identified.
The file has an embedded executable and was matched by PEiD threat signatures for further analysis.
The file has an embedded Windows 32 executable, and the Yara field lists suspicious features for further analysis.
The file was matched by PEiD threat signatures, but no suspicious features are identified because the signature list is up to date.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.