PracticeMaterial 350-201 dumps & CyberOps Professional Sure Practice with 141 Questions [Q64-Q86]

QUESTION 64
A threat actor attacked an organization’s Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial data, the session was disconnected, and the administrator’s account was disabled. Which activity triggered the behavior analytics tool?

QUESTION 65
Drag and drop the threat from the left onto the scenario that introduces the threat on the right. Not all options are used.

QUESTION 66

Refer to the exhibit. Cisco Rapid Threat Containment using Cisco Secure Network Analytics (Stealthwatch) and ISE detects the threat of malware-infected 802.1x authenticated endpoints and places that endpoint into a Quarantine VLAN using Adaptive Network Control policy. Which telemetry feeds were correlated with SMC to identify the malware?

QUESTION 67
The physical security department received a report that an unauthorized person followed an authorized individual to enter a secured premise. The incident was documented and given to a security specialist to analyze. Which step should be taken at this stage?

QUESTION 68
Drag and drop the telemetry-related considerations from the left onto their cloud service models on the right.

QUESTION 69
A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)

QUESTION 70
A new malware variant is discovered hidden in pirated software that is distributed on the Internet. Executives have asked for an organizational risk assessment. The security officer is given a list of all assets. According to NIST, which two elements are missing to calculate the risk assessment? (Choose two.)

QUESTION 71
A Mac laptop user notices that several files have disappeared from their laptop documents folder. While looking for the files, the user notices that the browser history was recently cleared. The user raises a case, and an analyst reviews the network usage and discovers that it is abnormally high. Which step should be taken to continue the investigation?

QUESTION 72
A payroll administrator noticed unexpected changes within a piece of software and reported the incident to the incident response team. Which actions should be taken at this step in the incident response workflow?

QUESTION 73
How is a SIEM tool used?

QUESTION 74
The incident response team was notified of detected malware. The team identified the infected hosts, removed the malware, restored the functionality and data of infected systems, and planned a company meeting to improve the incident handling capability. Which step was missed according to the NIST incident handling guide?

QUESTION 75
A security expert is investigating a breach that resulted in a $32 million loss from customer accounts. Hackers were able to steal API keys and two-factor codes due to a vulnerability that was introduced in a new code a few weeks before the attack. Which step was missed that would have prevented this breach?

QUESTION 76

Refer to the exhibit. An engineer is reverse engineering a suspicious file by examining its resources. What does this file indicate?

QUESTION 77
Which command does an engineer use to set read/write/execute access on a folder for everyone who reaches the resource?

QUESTION 78
Drag and drop the NIST incident response process steps from the left onto the actions that occur in the steps on the right.

QUESTION 79
An organization had several cyberattacks over the last 6 months and has tasked an engineer with looking for patterns or trends that will help the organization anticipate future attacks and mitigate them. Which data analytic technique should the engineer use to accomplish this task?

QUESTION 80

Refer to the exhibit. What results from this script?

QUESTION 81
An analyst is alerted for a malicious file hash. After analysis, the analyst determined that an internal workstation is communicating over port 80 with an external server and that the file hash is associated with Duqu malware. Which tactics, techniques, and procedures align with this analysis?

QUESTION 82
Drag and drop the threat from the left onto the scenario that introduces the threat on the right. Not all options are used.

QUESTION 83
Employees receive an email from an executive within the organization that summarizes a recent security breach and requests that employees verify their credentials through a provided link. Several employees report the email as suspicious, and a security analyst is investigating the reports. Which two steps should the analyst take to begin this investigation? (Choose two.)

QUESTION 84
What is the HTTP response code when the REST API information requested by the authenticated user cannot be found?

QUESTION 85
A security architect in an automotive factory is working on the Cyber Security Management System and is implementing procedures and creating policies to prevent attacks. Which standard must the architect apply?

QUESTION 86
Refer to the exhibit.

Where are the browser page rendering permissions displayed?