DRAG DROP (Drag and Drop is not supported)Drag and drop the technology on the left onto the data type the technology provides on the right.Select and Place:
Answer(s): A
Refer to the exhibit. In the PCAP file, what is the MAC address of the server that has 443 port open?
To determine the MAC address of the server that has port 443 open, we need to identify the device acting as the server, which corresponds to the system accepting traffic on port 443 (usually HTTPS).Looking at the image:● The destination IP for all the packets in the list is 185.52.170.27, which is the server since the traffic is going towards port 443 (a common web server port).● The MAC address of the destination device (server) is shown in the Ethernet II section as b4:2a:0e:f2:27:83, which corresponds to the destination address.
Refer to the exhibit. An engineer received a ticket to analyze unusual network traffic. What is occurring?
Answer(s): C
Which type of attack is a blank email with the subject "price deduction" that contains a malicious attachment?
A phishing attack involves sending deceptive messages to individuals, often via emails, that appear to be from legitimate sources. These messages aim to trick recipients into taking certain actions, such as clicking on malicious links or downloading attachments. In this scenario, the email's subject line, "price deduction," might lure recipients into believing it's related to a discount or price-related information, prompting them to open the attached file. However, the attachment is malicious and may contain malware designed to compromise the recipient's system or steal sensitive information.
An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?
Answer(s): D
The 5-tuple (source IP, destination IP, source port, destination port, and protocol) uniquely identifies a network session or flow across logs, enabling correlation of related packets.
Refer to the exhibit. What is shown in this PCAP file?
https://launchschool.com/books/http/read/what_is_a_url
How is NetFlow different from traffic mirroring?
NetFlow is a network protocol developed by Cisco that gathers metadata about network traffic. It collects information like source and destination IP addresses, ports, protocols, and byte counts, providing insight into network traffic patterns.
Which two elements of the incident response process are stated in NIST Special Publication 800-61 r2? (Choose two.)
Answer(s): A,B
https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-61r2.pdf
Share your comments for Cisco 200-201 exam with other users:
good exam questions
I have to say this is really close to real exam. Passed my exam with this.
good analytics question
this looks accurate
question 46, the answer should be data "virtualization" (not visualization).
its useful.
Pass this exam 3 days ago. The PDF version and the Xengine App is quite useful.
informative for me.
question 134s answer shoule be "dlp"
in 72 the answer must be [sys_user_has_role] table.
i appreciated the mix of multiple-choice and short answer questions. i passed my exam this morning.
great to find this website, thanks
examination questions seem to be relevant.
planning to take psm test
please allow to download
please provide dumps
is the answer to question 15 correct ? i feel like the answer should be b
its getting more technical
i think these questions are what i need.
helpful assessment
i am confused about the answers to the questions. do you know if the answers are correct?
hi, please make the dumps available for my upcoming examination.
good practice
so far it is really informative
hi i want it please please upload it
am preparing for exam ,just nice questions
please upload c_tadm_23 exam
can we get tdvan4 vantage data engineering pdf?
want to clear the exam.
could you please upload the dumps of sap c_sac_2302
asm management configuration is about storage
kool thumb up
just passed the az-500 exam this last friday. most of the questions in this exam dumps are in the exam. i bought the full version and noticed some of the questions which were answered wrong in the free version are all corrected in the full version. this site is good but i wish the had it in an interactive version like a test engine simulator.
i can practice for exam