SkillTestPro | Cisco 200-201 Test Bank

Cisco CyberOps Associate Practice Test 6

Cisco Certified CyberOps Associate

1 / 10

What is the primary purpose of a security governance framework like the NIST Cybersecurity Framework?

To provide a list of all vulnerabilities in the network

To provide a set of guidelines and best practices for managing cybersecurity risk

To automatically block all malicious traffic

To manage and audit all user accounts

To generate a report of all network connections

2 / 10

Which of the following is an example of an access control model that uses rules based on attributes of the user, resource, or environment?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Rule-Based Access Control

3 / 10

A security analyst is performing a network intrusion analysis and wants to determine the location of a source IP address. Which type of tool would be most effective for this?

A packet capture tool like Wireshark

A port scanner like Nmap

A geolocalization tool or service

A vulnerability scanner

A SIEM system

4 / 10

What is the purpose of a keylogger?

To encrypt a user's files and demand a ransom

To secretly record a user's keystrokes

To act as a self-replicating program that spreads to other computers

To display unwanted advertisements

To grant an attacker remote access to a system

5 / 10

Which of the following is a security policy that outlines the rules for how employees can use company computers, networks, and resources?

A Data Retention Policy

An Acceptable Use Policy (AUP)

An Incident Response Plan

A Remote Access Policy

A Password Policy

6 / 10

A security analyst is analyzing a web server log and finds multiple log entries indicating attempts to inject malicious code into a form field. What type of attack is this?

A Cross-Site Scripting (XSS) attack

A Denial-of-Service (DoS) attack

A buffer overflow attack

A brute-force attack

A man-in-the-middle (MitM) attack

7 / 10

Which of the following best describes the difference between an IDS and an IPS?

An IDS monitors traffic but an IPS only monitors host activity.

An IDS actively blocks malicious traffic, while an IPS only detects and alerts on it.

An IDS generates logs, while an IPS does not.

An IDS and an IPS are the same thing.

An IDS detects but does not block malicious traffic, while an IPS detects and actively blocks it.

8 / 10

In the context of the TCP header, which flag is used to synchronize sequence numbers and initiate a connection?

ACK

SYN

FIN

RST

URG

9 / 10

Which of the following is a primary function of the ps command on a Linux system?

To list active network connections

To display the contents of a directory

To test network connectivity

To show running processes and their status

To view the routing table

10 / 10

A security team is investigating a host that is behaving suspiciously. They find that a malicious process has been hidden from the operating system's process list. What type of malware is designed to conceal its presence in this manner?

Ransomware

Spyware

Rootkit

Adware

Worm

Your score is

The average score is 90%