200-201: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

200-201: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) practice questions, page 20 of 23, with answer review and explanations.

Question 96

Refer to the exhibit. What does the message indicate?

  1. an access attempt was made from the Mosaic web browser
  2. a successful access attempt was made to retrieve the password file
  3. a successful access attempt was made to retrieve the root of the website
  4. a denied access attempt was made to retrieve the password file

Question 97

Refer to the exhibit. This request was sent to a web application server driven by a database. Which type of web server attack is represented?

  1. parameter manipulation
  2. heap memory corruption
  3. command injection
  4. blind SQL injection

Question 98

A SOC analyst is investigating an incident that involves a Linux system that is identifying specific sessions. Which identifier tracks an active program?

  1. application identification number
  2. active process identification number
  3. runtime identification number
  4. process identification number

Question 99

An offline audit log contains the source IP address of a session suspected to have exploited a vulnerability resulting in system compromise. Which kind of evidence is this IP address?

  1. best evidence
  2. corroborative evidence
  3. indirect evidence
  4. forensic evidence

Question 100

Which system monitors local system operation and local network access for violations of a security policy?

  1. host-based intrusion detection
  2. systems-based sandboxing
  3. host-based firewall
  4. antivirus