200-201 Practice Test

What is rule-based detection when compared to statistical detection?

A.

proof of a user's identity

B.

proof of a user's action

C.

likelihood of user's action

D.

Dfalsification of a user's identity

Which two elements are used for profiling a network? (Choose two.)

A.

session duration

B.

total throughput

C.

running processes

D.

 listening ports

E.

EOS fingerprint

Which evasion technique is indicated when an intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources?

A.

resource exhaustion

B.

tunneling

C.

traffic fragmentation

D.

timing attack

Which attack is the network vulnerable to when a stream cipher like RC4 is used twice with the same key?

A.

forgery attack

B.

plaintext-only attack

C.

ciphertext-only attack

D.

meet-in-the-middle attack

What does cyber attribution identify in an investigation?

A.

exploit of an attack

B.

 threat actors of an attack

C.

vulnerabilities exploited

D.

cause of an attack