200-201 試験問題を無料オンラインアクセス

How does agentless monitoring differ from agent-based monitoring?

• A.Agentless can access the data via API. While agent-base uses a less efficient method and accesses log data through WMI.
• B.Agent-based monitoring is less intrusive in gathering log data, while agentless requires open ports to fetch the logs
• C.Agent-based has a possibility to locally filter and transmit only valuable data, while agentless has much higher network utilization
• D.Agent-based monitoring has a lower initial cost for deployment, while agentless monitoring requires resource-intensive deployment.

A network engineer informed a security team of a large amount of traffic and suspicious activity from an unknown source to the company DMZ server The security team reviewed the data and identified a potential DDoS attempt According to NIST, at which phase of incident response is the security team?

• A.recovery
• B.preparation
• C.detection and analysis
• D.containment and eradication

What is a description of "phishing" as a social engineering attack"?

• A.The attacker focuses on creating a good pretext or a fabricated scenario that is used to try and steal victims' personal information
• B.A hacker masquerading as a trusted entity, dupes a victim into opening an email, instant message, or text message The recipient is then tricked into clicking a malicious link.
• C.Someone without the proper authentication follows an authenticated employee into a restricted area The attacker might impersonate a delivery driver and wait outside a building to get things started
• D.Fake Social Security Administration personnel contact random individuals inform them that there has been a computer problem on their end and ask that those individuals confirm their Social Security Number, all for the purpose of committing identity theft.

Which two pieces of information are collected from the IPv4 protocol header? (Choose two.)

• A.UDP port to which the traffic is destined
• B.source IP address of the packet
• C.TCP port from which the traffic was sourced
• D.destination IP address of the packet
• E.UDP port from which the traffic is sourced

What is email greylisting as implemented by a mail transfer agent (MTA)?

• A.allowing emails from unknown senders temporarily
• B.returning emails that are potential phishing attempts
• C.quarantining emails sent from outside the organization
• D.denying any email from an unrecognized sender