200-201 Practice Test

200-201 Practice Test practice questions, page 2 of 19, with answer review and explanations.

Question 6

One of the objectives of information security is to protect the CIA of information and systems. What does CIA mean in this context?

  1. confidentiality, identity, and authorization
  2. confidentiality, integrity, and authorization
  3. confidentiality, identity, and availability
  4. confidentiality, integrity, and availability

Question 7

What is rule-based detection when compared to statistical detection?

  1. proof of a user's identity
  2. proof of a user's action
  3. likelihood of user's action
  4. falsification of a user's identity

Question 8

An engineer configured regular expression ".*\.([Dd][Oo][Cc]|[Xx][LI][Ss]|[Pp][Pp][Tt]) HTTP/1.[01]" on Cisco ASA firewall. What does this regular expression do?

  1. It captures .doc, .xls, and .pdf files in HTTP v1.0 and v1.1.
  2. It captures documents in an HTTP network session.
  3. It captures Word, Excel, and PowerPoint files in HTTP v1.0 and v1.1.
  4. It captures .doc, .xls, and .ppt files extensions in HTTP v1.0.

Question 9

Which process is used when IPS events are removed to improve data integrity?

  1. data availability
  2. data normalization
  3. data signature
  4. data protection

Question 10

An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?

  1. sequence numbers
  2. IP identifier
  3. 5-tuple
  4. timestamps