Performing CyberOps Using Cisco Security Technologies (CBRCOR)
Read questions, check verified answers and discuss the reasoning. Use reading options to shape your revision, or switch to the simulator for timed practice.
52 questions in this view
A security analyst is investigating an attack on an organization's database server and must determine the sequence of events based on the analysis of traffic patterns. The observations have been made:
1. Multiple rapid connections to the database server from an external IP address were detected.
2. The database server started to communicate with a known command-and-control server.
3. Many database records were accessed and modified within a short period.
4. A sudden increase in inbound traffic to the database server from various IP addresses was observed.
Based on this information, what is the correct sequence of events during the attack?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An organization must automate the provisioning of infrastructure required for software releases. Developers must apply infrastructure code from within existing development tools. Which DevOps practice must be applied?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
When consuming APIs with security constraints like rate limits and timeouts, which combination of techniques must a security team implement to ensure API requests are processed efficiently without exceeding limits or triggering errors?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An employee that mainly works from the office accessed company resources via VPN with SMS-based two-factor authentication during nonworking hours. Cisco Secure Network Analytics generated an alert that a large amount of data was transferred from HR databases to the employee endpoint. Cisco Umbrella detected that the employee loaded a large amount of data to an external file share. The investigation concludes that the external file share belongs to a competitor. Which two indicators in the scenario would trigger UEBA? (Choose two.)
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
Which HTTP response code is associated with a request that requires more user information?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.
An organization had a recent breach with a man-in-the-middle attack. Attackers were able to intercept traffic and steal customer's data. The organization has asked a security engineer to make its systems better at stopping similar attacks from happening in the future. What recommendations should the security engineer provide to enhance security and protect against future man-in-the-middle attacks?
Select an answer above, then submit your vote. Reading or practicing does not cast a vote.