200-201 Practice Test

200-201 Practice Test practice questions, page 3 of 19, with answer review and explanations.

Question 11

What is a difference between SOAR and SIEM?

  1. SOAR platforms are used for threat and vulnerability management, but SIEM applications are not
  2. SIEM applications are used for threat and vulnerability management, but SOAR platforms are not
  3. SOAR receives information from a single platform and delivers it to a SIEM
  4. SIEM receives information from a single platform and delivers it to a SOAR

Question 12

What is the difference between mandatory access control (MAC) and discretionary access control (DAC)?

  1. MAC is controlled by the discretion of the owner and DAC is controlled by an administrator
  2. MAC is the strictest of all levels of control and DAC is object-based access
  3. DAC is controlled by the operating system and MAC is controlled by an administrator
  4. DAC is the strictest of all levels of control and MAC is object-based access

Question 13

What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?

  1. least privilege
  2. need to know
  3. integrity validation
  4. due diligence

Question 14

What is the virtual address space for a Windows process?

  1. physical location of an object in memory
  2. set of pages that reside in the physical memory
  3. system-level memory protection feature built into the operating system
  4. set of virtual memory addresses that can be used

Question 15

Which security principle is violated by running all processes as root or administrator?

  1. principle of least privilege
  2. role-based access control
  3. separation of duties
  4. trusted computing base