Free Understanding Cisco Cybersecurity Operations Fundamentals Exam 200-201 Exam Practice Test

During which phase of the forensic process are tools and techniques used to extract information from the collected data?

• investigation
• examination
• reporting
• collection

An engineer must compare NIST vs ISO frameworks The engineer deeded to compare as readable documentation and also to watch a comparison video review. Using Windows 10 OS. the engineer started a browser and searched for a NIST document and then opened a new tab in the same browser and searched for an ISO document for comparisonThe engineer tried to watch the video, but there 'was an audio problem with OS so the engineer had to troubleshoot it At first the engineer started CMD and looked fee a driver path then locked for a corresponding registry in the registry editor The engineer enabled 'Audiosrv' in task manager and put it on auto start and the problem was solved Which two components of the OS did the engineer touch? (Choose two)

• permissions
• PowerShell logs
• service
• MBR
• process and thread

Refer to the exhibit. An attacker scanned the server using Nmap. What did the attacker obtain from this scan?

• Identified a firewall device preventing the pert state from being returned.
• Identified open SMB ports on the server
• Gathered information on processes running on the server
• Gathered a list of Active Directory users

What is the difference between indicator of attack (loA) and indicators of compromise (loC)?

• loA is the evidence that a security breach has occurred, and loC allows organizations to act before the vulnerability can be exploited.
• loA refers to the individual responsible for the security breach, and loC refers to the resulting loss.
• loC is the evidence that a security breach has occurred, and loA allows organizations to act before the vulnerability can be exploited.
• loC refers to the individual responsible for the security breach, and loA refers to the resulting loss.

An employee received an email from a colleague's address asking for the password for the domain controller. The employee noticed a missing letter within the sender's address. What does this incident describe?

• brute-force attack
• insider attack
• shoulder surfing
• social engineering