200-201 Practice Test

200-201 Practice Test practice questions, page 8 of 19, with answer review and explanations.

Question 36

A company receptionist received a threatening call referencing stealing assets and did not take any action assuming it was a social engineering attempt. Within 48 hours, multiple assets were breached, affecting the confidentiality of sensitive information. What is the threat actor in this incident?

  1. company assets that are threatened
  2. customer assets that are threatened
  3. perpetrators of the attack
  4. victims of the attack

Question 37

What is the relationship between a vulnerability and a threat?

  1. A threat exploits a vulnerability
  2. A vulnerability is a calculation of the potential loss caused by a threat
  3. A vulnerability exploits a threat
  4. A threat is a calculation of the potential loss caused by a vulnerability

Question 38

What is the principle of defense-in-depth?

  1. Agentless and agent-based protection for security are used.
  2. Several distinct protective layers are involved.
  3. Access control models are involved.
  4. Authentication, authorization, and accounting mechanisms are used.

Question 39

Drag and drop the uses on the left onto the type of security system on the right. Select and Place:

Question 40

What is the difference between the rule-based detection when compared to behavioral detection?

  1. Rule-Based detection is searching for patterns linked to specific types of attacks, while behavioral is identifying per signature.
  2. Rule-Based systems have established patterns that do not change with new data, while behavioral changes.
  3. Behavioral systems are predefined patterns from hundreds of users, while Rule-Based only flags potentially abnormal patterns using signatures.
  4. Behavioral systems find sequences that match a particular attack signature, while Rule-Based identifies potential attacks.