Question 1

What is a difference between a threat and a vulnerability?

Options :

A :

A vulnerability is a risk of unauthorized actions from a threat actor, and a threat is the actions that malicious actors perform for privilege escalation.

B :

A threat is what an engineer is trying to protect an asset against, and a vulnerability is a weakness in an asset that an engineer is trying to mitigate.

C :

A vulnerability is an asset without hardened protection, and a threat is a weakness that is open to attackers due to misconfiguration.

D :

A threat is a weakness in an asset that an engineer is trying to mitigate, and a vulnerability is an existing risk of possible damage or loss of data.

Answer: B

Question 2

A security engineer must investigate a recent breach within the organization. An engineer noticed that a breached workstation is trying to connect to the domain "Ranso4730-mware92-647". which is known as malicious. In which step of the Cyber Kill Chain is this event?

Options :

A : Vaporization

B : Delivery

C : reconnaissance

D : Action on objectives

Answer: D

Question 3

Which type of data collection requires the largest amount of storage space?

Options :

A : alert data

B : transaction data

C : session data

D : full packet capture

Answer: D

Question 4

A security analyst reviews the firewall and observes the large number of frequent events. The analyst starts the packet capture with the Wireshark and identifies that TCP port reuse was detected incorrectly as a TCP split-handshake attack by the firewall. How must an impact from this event be categorized?

Options :

A : false positive

B : true positive

C : true negative

D : false negative

Answer: B

Question 5

An engineer received a flood of phishing emails from HR with the source address HRjacobm@companycom. What is the threat actor in this scenario?

Options :

A : phishing email

B : sender

C : HR

D : receiver

Answer: B

Free 200-201 Mock Exam – Practice Online Confidently

Buying Options: