Free Cisco 200-201 Exam Dumps Questions & Answers

Refer to the exhibit.

Refer to the exhibit. A SOC analyst is examining the Windows security logs of one of the endpoints. What is the possible reason for this event log?

• A.Malware Attack
• B.Windows failed to audit logs
• C.System maintenance logs
• D.Brute force attack

Refer to exhibit.

An engineer is Investigating an Intrusion and Is analyzing the pcap file. Which two key elements must an engineer consider? (Choose two.)

• A.SYN packets acknowledged from several source IP addresses
• B.same source IP address with a destination port 80
• C.High volume oi SYN packets with very little variance in lime
• D.identical length of 120 and window size (64)
• E.Variable "info" field and unchanging sequence number

Which difficulty occurs when log messages are compared from two devices separated by a Layer 3 device that performs Network Address Translation?

• A.IP addresses in the log messages do not match
• B.Log messages contain incorrect information
• C.Timestamps of the log messages are different.
• D.IP addresses in the log messages match

An analyst is using the SIEM platform and must extract a custom property from a Cisco device and capture the phrase, "File: Clean." Which regex must the analyst import?

• A.^File: Clean$
• B.^Parent File Clean$
• C.File: Clean
• D.File: Clean (.*)

An engineer must verify vulnerabilities found in the scanning process The engineer checks the impact of those findings to the organization and compares the results with known threats inside organization What is the benefit of knowing this information?

• A.A pcap file can be prepared
• B.Logs can be gathered
• C.An exploit can be built.
• D.Risk can be calculated