200-201 Practice Test

What is the difference between the ACK flag and the RST flag in the NetFlow log session?

A.

The RST flag confirms the beginning of the TCP connection, and the ACK flag responds
when the data for the payload is complete

B.

BT

C.

The RST flag confirms the receipt of the prior segment, and the ACK flag allows for the spontaneous termination of a connection

D.

The ACK flag confirms the receipt of the prior segment, and the RST flag allows for the spontaneous termination of a connection

You have identified a malicious file in a sandbox analysis tool. Which piece of file
information from the analysis
is needed to search for additional downloads of this file by other hosts?

A.

file name

B.

file hash value

C.

file type

D.

file size

What is the practice of giving employees only those permissions necessary to perform their specific role within an organization?

A.

least privilege

B.

need to know

C.

integrity validation

D.

due diligence

An analyst discovers that a legitimate security alert has been dismissed.
Which signature caused this impact on network traffic?

A.

true negative

B.

false negative

C.

false positive

D.

true positive

In a SOC environment, what is a vulnerability management metric?

A.

code signing enforcement

B.

full assets scan

C.

internet exposed devices

D.

single factor authentication