Understanding Cybersecurity Operations Fundamentals (CBROPS) Exam Questions PDF download

QUESTION: 89

What is a difference between antivirus and antimalware security systems?

Antivirus deals with well-known threats, such as Trojans and viruses, and antimalware typically focuses on newer threats, such as polymorphic malware and malware delivered by zero-day exploits.
Antimalware offers the minimum layer of protection against classic viruses like keyloggers, and antivirus utilizes heuristic-based detection to proactively find source codes that indicate a threat.
Antimalware protects users from lingering, predictable yet dangerous malware, and antivirus protects users from the latest, currently in the wild exploits.
Antivirus updates rules faster, hence having the best protection against new malware, and antimalware is best for trojans and crypto-malware types of threats.

Answer(s): A

Explanation:

Antivirus software is designed to detect and remove traditional threats such as viruses, worms, and Trojans, which are often well-documented and understood. Antimalware, on the other hand, is typically more advanced and focuses on newer, sophisticated threats, such as polymorphic malware and zero-day exploits, providing a broader and more adaptive layer of security.

Reveal Solution Next Question

QUESTION: 90

What is data encapsulation?

Data is encrypted backwards, which makes it unusable.
Multiple hosts can be supported with only a few public IP addresses.
A protocol of the sending host adds additional data to the packet header.
Browsing history is erased automatically with every session.

Answer(s): C

Reveal Solution Next Question

QUESTION: 91

What is the role of NAT in data visibility?

load balancing
hiding IP addresses
web filtering
encrypting files

Answer(s): B

Explanation:

NAT modifies the source or destination IP addresses in IP packet headers as they travel across a network boundary. It allows multiple devices within a local network to share a single public IP address when communicating with external networks, thereby hiding the internal IP addresses of the devices from external entities. This process helps in enhancing security and privacy by obscuring the internal network structure and addresses from external visibility.

Reveal Solution Next Question

QUESTION: 92

Refer to the exhibit.
What does the message indicate?

an access attempt was made from the Mosaic web browser
a successful access attempt was made to retrieve the password file
a successful access attempt was made to retrieve the root of the website
a denied access attempt was made to retrieve the password file

Answer(s): C

Reveal Solution Next Question

QUESTION: 93

Refer to the exhibit.
Where is the executable file?

tags
info
MIME
name

Answer(s): C

Reveal Solution Next Question

QUESTION: 94

What is the difference between vulnerability and risk?

A risk is a possible danger that an exploit applies to, and a vulnerability represents the threat actor.
A vulnerability is a weakness that can be exploited, and the risk is the potential for loss or damage.
A vulnerability is an attack surface, and the risk is the vector of the attack.
Risk is the assessment of possible weaknesses, and vulnerability is a misconfiguration of an asset.

Answer(s): B

Explanation:

Vulnerability refers to a weakness in a system, application, or network that can be exploited by an attacker to gain unauthorized access or cause harm. Examples include software bugs, misconfigurations, or design flaws. Risk is the potential for loss or damage when a threat exploits a vulnerability. It represents the likelihood that a vulnerability could be exploited, causing negative consequences, such as financial loss, data breaches, or reputational harm.

Reveal Solution Next Question

QUESTION: 95

What is the impact of false negative alerts when compared to true negative alerts?

A false negative is someone trying to hack into the system and no alert is raised, and a true negative is an event that never happened and an alert was not raised.
A true negative is an alert for an exploit attempt when no attack was detected, and a false negative is when no attack happens and an alert is still raised.
A true negative is a legitimate attack that triggers a brute force alert, and a false negative is when no alert and no attack is occurring.
A false negative is an event that alerts for injection attack when no attack is happening, and a true negative is an attack that happens and an alert that is appropriately raised.

Answer(s): A

Reveal Solution Next Question

QUESTION: 96

An analyst must choose one source of information for further troubleshooting. One key requirement is to use low storage space over the next 12 months and quickly determine the source and scope of an attack to effectively mitigate it.
Which source of information must the analyst choose?

span port
NetFlow
.pcap file
traffic mirroring

Answer(s): B

Explanation:

NetFlow provides compact, metadata-based flow records that summarize who communicated with whom, when, for how long, and how much data was transferred. This uses far less storage than full packet captures while still enabling rapid scoping and source identification for incident response over long retention periods.

Reveal Solution Next Question

Cisco Understanding Cybersecurity Operations Fundamentals (CBROPS) 200-201 Dumps in PDF

Free Cisco 200-201 Real Questions (page: 12)

QUESTION: 89

Explanation:

QUESTION: 90

QUESTION: 91

Explanation:

QUESTION: 92

QUESTION: 93

QUESTION: 94

Explanation:

QUESTION: 95

QUESTION: 96

Explanation: