200-201 Practice Test

200-201 Practice Test practice questions, page 4 of 19, with answer review and explanations.

Question 16

What is the function of a command and control server?

  1. It enumerates open ports on a network device
  2. It drops secondary payload into malware
  3. It is used to regain control of the network after a compromise
  4. It sends instruction to a compromised system

Question 17

What is the difference between deep packet inspection and stateful inspection?

  1. Deep packet inspection is more secure than stateful inspection on Layer 4
  2. Stateful inspection verifies contents at Layer 4 and deep packet inspection verifies connection at Layer 7
  3. Stateful inspection is more secure than deep packet inspection on Layer 7
  4. Deep packet inspection allows visibility on Layer 7 and stateful inspection allows visibility on Layer 4

Question 18

Which evasion technique is a function of ransomware?

  1. extended sleep calls
  2. encryption
  3. resource exhaustion
  4. encoding

Question 19

Refer to the exhibit. Which two elements in the table are parts of the 5-tuple? (Choose two.)

  1. First Packet
  2. Initiator User
  3. Ingress Security Zone
  4. Source Port
  5. Initiator IP

Question 20

Drag and drop the security concept on the left onto the example of that concept on the right. Select and Place: