200-201 Practice Test

Question 66

Which type of attack occurs when an attacker is successful in eavesdropping on a conversation between two IP phones?

1. known-plaintext
2. replay
3. dictionary
4. man-in-the-middle

Question 67

Refer to the exhibit. What should be interpreted from this packet capture?

1. 81.179.179.69 is sending a packet from port 80 to port 50272 of IP address 192.168.122.100 using UDP protocol.
2. 192.168.122.100 is sending a packet from port 50272 to port 80 of IP address 81.179.179.69 using TCP protocol.
3. 192.168.122.100 is sending a packet from port 80 to port 50272 of IP address 81.179.179.69 using UDP protocol.
4. 81.179.179.69 is sending a packet from port 50272 to port 80 of IP address 192.168.122.100 using TCP protocol.

Question 68

What are the two characteristics of the full packet captures? (Choose two.)

1. Identifying network loops and collision domains.
2. Troubleshooting the cause of security and performance issues.
3. Reassembling fragmented traffic from raw data.
4. Detecting common hardware faults and identify faulty assets.
5. Providing a historical record of a network transaction.

Question 69

Refer to the exhibit. An engineer is analyzing this Cuckoo Sandbox report for a PDF file that has been downloaded from an email. What is the state of this file?

1. The file has an embedded executable and was matched by PEiD threat signatures for further analysis.
2. The file has an embedded non-Windows executable but no suspicious features are identified.
3. The file has an embedded Windows 32 executable and the Yara field lists suspicious features for further analysis.
4. The file was matched by PEiD threat signatures but no suspicious features are identified since the signature list is up to date.

Question 70

Drag and drop the technology on the left onto the data type the technology provides on the right. Select and Place: