CCNA Cyber Ops (Version 1.1) – Chapter 11 Test Online Full

How does using HTTPS complicate network security monitoring?

Which protocol is used to send e-mail messages between two servers that are in different e-mail domains?

What are two ways that ICMP can be a security threat to a company? (Choose two.)

Which function is provided by the Sguil application?

Which two options are network security monitoring approaches that use advanced analytic techniques to analyze network telemetry data? (Choose two.)

A system administrator has recommended to the CIO a move of some applications from a Windows server to a Linux server. The proposed server will use ext4 partitions and serve as a web server, file server, and print server. The CIO is considering the recommendation, but has some questions regarding security. Which two methods does Linux use to log data in order to identify a security event? (Choose two.)

A system administrator has recommended to the CIO a move of some applications from a Windows server to a Linux server. The proposed server will use ext4 partitions and serve as a web server, file server, and print server. The CIO is considering the recommendation, but has some questions regarding security. What is a daemon?

A system administrator has recommended to the CIO a move of some applications from a Windows server to a Linux server. The proposed server will use ext4 partitions and serve as a web server, file server, and print server. The CIO is considering the recommendation, but has some questions regarding security. Because the company uses discretionary access control (DAC) for user file management, what feature would need to be supported on the server?

A system administrator has recommended to the CIO a move of some applications from a Windows server to a Linux server. The proposed server will use ext4 partitions and serve as a web server, file server, and print server. The CIO is considering the recommendation, but has some questions regarding security. What are two benefits of using an ext4 partition instead of ext3? (Choose two.)

How can IMAP be a security threat to a company?

A system administrator runs a file scan utility on a Windows PC and notices a file lsass.exe in the Program Files directory. What should the administrator do?

How does a web proxy device provide data loss prevention (DLP) for an enterprise?

A system analyst is reviewing syslog messages and notices that the PRI value of a message is 26. What is the severity value of the message?

Which statement describes session data in security logs?

In a Cisco AVC system, in which module is NetFlow deployed?

What port number would be used if a threat actor was using NTP to direct DDoS attacks?

Which information can be provided by the Cisco NetFlow utility?

What is Tor?

Which statement describes statistical data in network security monitoring processes?

Refer to the exhibit. A network administrator is reviewing an Apache access log message. What is the status of the access request by the client?

How might corporate IT professionals deal with DNS-based cyber threats?

Refer to the exhibit. A junior network engineer is handed a print-out of the network information shown. Which protocol or service originated the information shown in the graphic?

Which technology is used in Cisco Next-Generation IPS devices to consolidate multiple security layers into a single platform?

Refer to the exhibit. How is the traffic from the client web browser being altered when connected to the destination website of www.cisco.com?

Which Windows log contains information about installations of software, including Windows updates?

Which Windows log records events related to login attempts and operations related to file or object access?

What does it indicate if the timestamp in the HEADER section of a syslog message is preceded by a period or asterisk symbol?

Which two application layer protocols manage the exchange of messages between a client with a web browser and a remote web server? (Choose two.)

Which protocol is a name resolution protocol often used by malware to communicate with command-and-control (CnC) servers?