200-201 Practice Test practice questions, page 5 of 19, with answer review and explanations.
Question 21
What is the difference between statistical detection and rule-based detection models?
Rule-based detection involves the collection of data in relation to the behavior of legitimate users over a period of time
Statistical detection defines legitimate data of users over a period of time and rule-based detection defines it on an IF/THEN basis
Statistical detection involves the evaluation of an object on its intended actions before it executes that behavior
Rule-based detection defines legitimate data of users over a period of time and statistical detection defines it on an IF/THEN basis
Question 22
What is the difference between a threat and a risk?
Threat represents a potential danger that could take advantage of a weakness, while the risk is the likelihood of a compromise or damage of an asset.
Risk represents the known and identified loss or danger in the system, while threat is a non-identified impact of possible risks.
Risk is the unintentional possibility of damages or harm to infrastructure, while the threats are certain and intentional.
Threat is a state of being exposed to an attack or a compromise, while risk is the calculation of damage or potential loss affecting the organization from an exposure.
Question 23
Which attack method intercepts traffic on a switched network?
denial of service
ARP cache poisoning
DHCP snooping
command and control
Question 24
What does an attacker use to determine which network ports are listening on a potential target device?
man-in-the-middle
port scanning
SQL injection
ping sweep
Question 25
What is a purpose of a vulnerability management framework?
identifies, removes, and mitigates system vulnerabilities
detects and removes vulnerabilities in source code