200-201 Practice Test

200-201 Practice Test practice questions, page 13 of 19, with answer review and explanations.

Question 61

An engineer receives a security alert that traffic with a known TOR exit node has occurred on the network. What is the impact of this traffic?

  1. ransomware communicating after infection
  2. users downloading copyrighted content
  3. data exfiltration
  4. user circumvention of the firewall

Question 62

What is an example of social engineering attacks?

  1. receiving an unexpected email from an unknown person with an attachment from someone in the same company
  2. receiving an email from human resources requesting a visit to their secure website to update contact information
  3. sending a verbal request to an administrator who knows how to change an account password
  4. receiving an invitation to the department's weekly WebEx meeting

Question 63

Refer to the exhibit. What is occurring in this network?

  1. ARP cache poisoning
  2. DNS cache poisoning
  3. MAC address table overflow
  4. MAC flooding attack

Question 64

Which data format is the most efficient to build a baseline of traffic seen over an extended period of time?

  1. syslog messages
  2. full packet capture
  3. NetFlow
  4. firewall event logs

Question 65

Which action prevents buffer overflow attacks?

  1. variable randomization
  2. using web based applications
  3. input validation
  4. using a Linux operating system