Question 1

A cyberattacker notices a security flaw in a software that a company is using They decide to tailor a specific worm to exploit this flaw and extract saved passwords from the software To which category of the Cyber Kill Cham model does this event belong?

Options :

A : reconnaissance

B : delivery

C : weaponization

D : exploitation

Answer: C

Question 2

Which technology on a host is used to isolate a running application from other applications?

Options :

A : sandbox

B : application allow list

C : application block list

D : host-based firewall

Answer: A

Question 3

A security engineer must investigate a recent breach within the organization. An engineer noticed that a breached workstation is trying to connect to the domain "Ranso4730-mware92-647". which is known as malicious. In which step of the Cyber Kill Chain is this event?

Options :

A : Vaporization

B : Delivery

C : reconnaissance

D : Action on objectives

Answer: D

Question 4

According to CVSS, what is a description of the attack vector score?

Options :

A : The metric score will be larger when it is easier to physically touch or manipulate the vulnerable component

B : It depends on how many physical and logical manipulations are possible on a vulnerable component

C : The metric score will be larger when a remote attack is more likely.

D : It depends on how far away the attacker is located and the vulnerable component

Answer: C

Question 5

Which are two denial-of-service attacks? (Choose two.)

Options :

A : TCP connections

B : ping of death

C : man-in-the-middle

D : code-red

E : UDP flooding

Answer: B,E

Free 200-201 Mock Exam – Practice Online Confidently

Buying Options: