200-201 Practice Test

Which two elements of the incident response process are stated in NIST Special
Publication 800-61 r2? (Choose two.)

A.

detection and analysis

B.

post-incident activity

C.

vulnerability management

D.

risk assessment

A security engineer has a video of a suspect entering a data center that was captured on  the same day that files in the same data center were transferred to a competitor. Which type of evidence is this?

A.

best evidence

B.

prima facie evidence

C.

indirect evidence

D.

physical evidence

the same day that files in the same data center were transferred to a competitor.
Which type of evidence is this?

A.

best evidence

B.

prima facie evidence

C.

indirect evidence

D.

physical evidence

A security engineer has a video of a suspect entering a data center that was captured on the same day that files in the same data center were transferred to a competitor. Which type of evidence is this?

A.

best evidence

B.

prima facie evidence

C.

indirect evidence

D.

Dphysical evidence

Refer to the exhibit.

Which two elements in the table are parts of the 5-tuple? (Choose two.)

A.

A. First Packet

B.

 Initiator User

C.

Ingress Security Zone

D.

Source Port

E.

Initiator IP