Instant Access Cisco.200-201.v2022-06-28.q108 Actual Practice Test Engine for Free (Page 10)

Question 41

An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture the analyst cannot determine the technique and payload used for the communication.

Which obfuscation technique is the attacker using?

A.transport layer security encryption
B.SHA-256 hashing
C.ROT13 encryption
D.Base64 encoding

Question 42

What describes a buffer overflow attack?

A.injecting new commands into existing buffers
B.fetching data from memory buffer registers
C.overloading a predefined amount of memory
D.suppressing the buffers in a process

Question 43

What is a difference between inline traffic interrogation and traffic mirroring?

A.Inline inspection acts on the original traffic data flow
B.Traffic mirroring passes live traffic to a tool for blocking
C.Traffic mirroring inspects live traffic for analysis and mitigation
D.Inline traffic copies packets for analysis and security

Question 44

An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture the analyst cannot determine the technique and payload used for the communication.
Which obfuscation technique is the attacker using?

A.ROT13 encryption
B.SHA-256 hashing
C.transport layer security encryption
D.Base64 encoding

Question 45

What is a sandbox interprocess communication service?

A.A collection of rules within the sandbox that prevent the communication between sandboxes.
B.A collection of network services that are activated on an interface, allowing for inter-port communication.
C.A collection of interfaces that allow for coordination of activities among processes.
D.A collection of host services that allow for communication between sandboxes.

Question 41

Question 42

Question 43

Question 44

Question 45

Download PDF File