600-199 試験問題を無料オンラインアクセス

Which three tools should be used for incident response? (Choose three.)

• A.antivirus/anti-malware software
• B.CPU
• C.screwdriver
• D.sniffer
• E.RAM
• F.video player

Which data is the most useful to determine if a network attack was occurring from inbound Internet traffic?

• A.DNS request logs
• B.syslogs from all core switches
• C.VPN connection logs
• D.Apache server logs
• E.NetfFow data from border firewall(s)

Which two statements about the IPv4 TTL field are true? (Choose two.)

• A.It is used to limit the lifetime of an IP datagram on the Internet.
• B.Each router that forwards an IP datagram reduces the TTL value by one.
• C.It is used to track IP datagrams on the Internet.
• D.If the TTL is 0, the datagram is automatically retransmitted.

When an IDS generates an alert for a correctly detected network attack, what is this event called?

• A.false negative
• B.true positive
• C.true negative
• D.false positive

What is the purpose of the TCP SYN flag?

• A.to synchronize the initial sequence number contained in the Sequence Number header field with the other end of the connection
• B.to sequence each byte of data in a TCP connection
• C.to sequence each byte of data in a TCP connection relative to the byte count contained in the Sequence Number header field
• D.to acknowledge outstanding data relative to the byte count contained in the Sequence Number header field