Question 1

An engineer received a flood of phishing emails from HR with the source address HRjacobm@companycom. What is the threat actor in this scenario?

Options :

A : phishing email

B : sender

C : HR

D : receiver

Answer: B

Question 2

Which two pieces of information are collected from the IPv4 protocol header? (Choose two.)

Options :

A : UDP port to which the traffic is destined

B : TCP port from which the traffic was sourced

C : source IP address of the packet

D : destination IP address of the packet

E : UDP port from which the traffic is sourced

Answer: C,D

Question 3

An automotive company provides new types of engines and special brakes for rally sports cars. The company has a database of inventions and patents for their engines and technical information Customers can access the database through the company's website after they register and identify themselves. Which type of protected data is accessed by customers?

Options :

A : IP data

B : PII data

C : PSI data

D : PHI data

Answer: A

Question 4

Which are two denial-of-service attacks? (Choose two.)

Options :

A : TCP connections

B : ping of death

C : man-in-the-middle

D : code-red

E : UDP flooding

Answer: B,E

Question 5

What is a difference between a threat and a vulnerability?

Options :

A :

A vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

B :

A threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

C :

A vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

D :

A threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.

Answer: B

Free 200-201 Mock Exam – Practice Online Confidently

Buying Options: