DumpsTorrent 200-201 dumps & CyberOps Associate Sure Practice with 260 Questions [Q68-Q88]

QUESTION 68
An analyst discovers that a legitimate security alert has been dismissed.
Which signature caused this impact on network traffic?

QUESTION 69
What is a difference between SIEM and SOAR?

QUESTION 70
Refer to the exhibit.

What is occurring?

QUESTION 71
Refer to the exhibit.

Which kind of attack method is depicted in this string?

QUESTION 72
A security analyst notices a sudden surge of incoming traffic and detects unknown packets from unknown senders After further investigation, the analyst learns that customers claim that they cannot access company servers According to NIST SP800-61, in which phase of the incident response process is the analyst?

QUESTION 73
The SOC team has confirmed a potential indicator of compromise on an endpoint. The team has narrowed the executable file’s type to a new trojan family. According to the NIST Computer Security Incident Handling Guide, what is the next step in handling this event?

QUESTION 74
Which two compliance frameworks require that data be encrypted when it is transmitted over a public network?
(Choose two.)

QUESTION 75
What is the difference between an attack vector and attack surface?

QUESTION 76
Which two elements are used for profiling a network? (Choose two.)

QUESTION 77
Refer to the exhibit.

What does the message indicate?

QUESTION 78
Which metric should be used when evaluating the effectiveness and scope of a Security Operations Center?

QUESTION 79
Which two elements are assets in the role of attribution in an investigation? (Choose two.)

QUESTION 80
Which piece of information is needed for attribution in an investigation?

QUESTION 81
A security specialist notices 100 HTTP GET and POST requests for multiple pages on the web servers. The agent in the requests contains PHP code that, if executed, creates and writes to a new PHP file on the webserver. Which event category is described?

QUESTION 82
Which event is a vishing attack?

QUESTION 83
While viewing packet capture data, an analyst sees that one IP is sending and receiving traffic for multiple devices by modifying the IP header.
Which technology makes this behavior possible?

QUESTION 84
A network engineer discovers that a foreign government hacked one of the defense contractors in their home country and stole intellectual property. What is the threat agent in this situation?

QUESTION 85
Which incidence response step includes identifying all hosts affected by an attack?

QUESTION 86
Refer to the exhibit.

What is shown in this PCAP file?

QUESTION 87
What is the impact of false positive alerts on business compared to true positive?

QUESTION 88
Which tool gives the ability to see session data in real time?