Cisco 350-201 - Performing CyberOps Using Core Security Technologies (CBRCOR) Exam
Page: 3 / 46
Total 228 questions
Question #11 (Topic: Single Topic)
DRAG DROP
Drag and drop the phases to evaluate the security posture of an asset from the left onto the activity that happens during the phases on the right.
Select and Place:
Drag and drop the phases to evaluate the security posture of an asset from the left onto the activity that happens during the phases on the right.
Select and Place:
Answer: 
Question #12 (Topic: Single Topic)
According to GDPR, what should be done with data to ensure its confidentiality, integrity, and availability?
A. Perform a vulnerability assessment
B. Conduct a data protection impact assessment
C. Conduct penetration testing
D. Perform awareness testing
Answer: B
Question #13 (Topic: Single Topic)
A payroll administrator noticed unexpected changes within a piece of software and reported the incident to the incident response team. Which actions should be
taken at this step in the incident response workflow?
taken at this step in the incident response workflow?
A. Classify the criticality of the information, research the attackerג€™s motives, and identify missing patches
B. Determine the damage to the business, extract reports, and save evidence according to a chain of custody
C. Classify the attack vector, understand the scope of the event, and identify the vulnerabilities being exploited
D. Determine the attack surface, evaluate the risks involved, and communicate the incident according to the escalation plan
Answer: C
Question #14 (Topic: Single Topic)
A company recently completed an internal audit and discovered that there is CSRF vulnerability in 20 of its hosted applications. Based on the audit, which
recommendation should an engineer make for patching?
recommendation should an engineer make for patching?
A. Identify the business applications running on the assets
B. Update software to patch third-party software
C. Validate CSRF by executing exploits within Metasploit
D. Fix applications according to the risk scores
Answer: D
Question #15 (Topic: Single Topic)
An engineer is analyzing a possible compromise that happened a week ago when the company database servers unexpectedly went down. The analysis reveals
that attackers tampered with Microsoft SQL Server Resolution Protocol and launched a DDoS attack. The engineer must act quickly to ensure that all systems are
protected. Which two tools should be used to detect and mitigate this type of future attack? (Choose two.)
that attackers tampered with Microsoft SQL Server Resolution Protocol and launched a DDoS attack. The engineer must act quickly to ensure that all systems are
protected. Which two tools should be used to detect and mitigate this type of future attack? (Choose two.)
A. firewall
B. Wireshark
C. autopsy
D. SHA512
E. IPS
Answer: AE
