CBROPS 1 | UPDATED Questions with 100% Verified
Answers
Q1: management
A: Which NIST IR category stakeholder is responsible for coordinating incident response
among various business units, minimizing damage, and reporting to regulatory agencies?
Response
CSIRT
PSIRT
public affairs
management
Q2: Defense-in-depth strategy
A: One of the primary benefits of a ____________ is that even if a single control (such as a firewall
or IPS) fails, other controls can still protect your environment and assets.
Response
DLP
AMP
CoPP
Defense-in-depth strategy
Q3: Individual investigations: These investigations often take the
form of ediscovery
A: What are the three broad categories of digital forensic investigations?
Response
Individual investigations: These investigations often take the form of ediscovery
Q4: Public investigations: These investigations are resolved in the
court of law
A: Open investigations: These are conducted by the press and media
Public investigations: These investigations are resolved in the court of law
Private investigations: These are corporate investigations
Q5: Private investigations: These are corporate investigations
A:
Q6: A DNS server spoofing attack has been discovered
A: During a security audit, the auditor executes the nslookup command on a Windows
machine to check the IP address of a web server. The IP in the response is not the IP that
should be resolved by nslookup as per the organization's inventory of IP records. What
might be the cause behind the discrepancy?
Response
The nslookup service is corrupted on the Windows machine
,An ARP spoofing attack was in progress
The auditor executed the wrong command; the command should be ping
A DNS server spoofing attack has been discovered
Q7: host-based firewall
A: Which system monitors local system operation and local network access for violations of
a security policy?
Response
antivirus
host-based firewall
systems-based sandboxing
host-based intrusion detection
Q8: Detect zero-day attacks
A: A signature-driven IDS system cannot do which of the following?
Response
Detect zero-day attacks
Be implemented in promiscuous as well as in-line modes
Detect network anomalies
Detect passive scans
Q9: Digital certificate
A: A user wants to verify the identity of a web server. Which of the following can be used?
Response
Domain name
Digital certificate
IP address
All of the above
Q10: Application whitelisting
A: A security engineer wants to restrict employees to only opening certain applications on
their computer. Which of the following techniques is recommended?
Response
All the computer's antivirus programs handle this restriction
Using sandboxing techniques
Using a host-based firewall
Application whitelisting
Q11: Secure Hash Algorithm (SHA)
A: Which of the following hashing algorithms are used in IPsec?(Select all that apply.)
Q12: Message Digest Algorithm 5 (MD5)
, A: Response
AES 192
AES 256
Secure Hash Algorithm (SHA)
Message Digest Algorithm 5 (MD5)
Q13: Cisco NBAR
A: The following figure displays a Cisco IOS command output on a router. What IOS service
is being used to determine the protocols and ports associated with different applications
traversing the router?
Response
Cisco NBAR
Cisco SIO
Cisco CBAC
Cisco IPS
Q14: Peercoin
A: ___ is a P2P crypto currency that utilizes both proof-of-stake and proof-of-work systems.
Response
Peercoin
Peercurrency
Spotify
Lionshare
Q15: detection and analysis
post-incident activity
A: Which two elements of the incident response process are stated in NIST Special
Publication 800-61 r2?(Choose two.)
Response
detection and analysis
post-incident activity
vulnerability management
risk assessment
vulnerability scoring
Q16: sandboxing
A: Which technique could be used by security personnel to analyze a suspicious file in a
safe environment?
Response
whitelisting
baselining
sandboxing
blacklisting
Q17: The TCP/IP implementation is functional.
Answers
Q1: management
A: Which NIST IR category stakeholder is responsible for coordinating incident response
among various business units, minimizing damage, and reporting to regulatory agencies?
Response
CSIRT
PSIRT
public affairs
management
Q2: Defense-in-depth strategy
A: One of the primary benefits of a ____________ is that even if a single control (such as a firewall
or IPS) fails, other controls can still protect your environment and assets.
Response
DLP
AMP
CoPP
Defense-in-depth strategy
Q3: Individual investigations: These investigations often take the
form of ediscovery
A: What are the three broad categories of digital forensic investigations?
Response
Individual investigations: These investigations often take the form of ediscovery
Q4: Public investigations: These investigations are resolved in the
court of law
A: Open investigations: These are conducted by the press and media
Public investigations: These investigations are resolved in the court of law
Private investigations: These are corporate investigations
Q5: Private investigations: These are corporate investigations
A:
Q6: A DNS server spoofing attack has been discovered
A: During a security audit, the auditor executes the nslookup command on a Windows
machine to check the IP address of a web server. The IP in the response is not the IP that
should be resolved by nslookup as per the organization's inventory of IP records. What
might be the cause behind the discrepancy?
Response
The nslookup service is corrupted on the Windows machine
,An ARP spoofing attack was in progress
The auditor executed the wrong command; the command should be ping
A DNS server spoofing attack has been discovered
Q7: host-based firewall
A: Which system monitors local system operation and local network access for violations of
a security policy?
Response
antivirus
host-based firewall
systems-based sandboxing
host-based intrusion detection
Q8: Detect zero-day attacks
A: A signature-driven IDS system cannot do which of the following?
Response
Detect zero-day attacks
Be implemented in promiscuous as well as in-line modes
Detect network anomalies
Detect passive scans
Q9: Digital certificate
A: A user wants to verify the identity of a web server. Which of the following can be used?
Response
Domain name
Digital certificate
IP address
All of the above
Q10: Application whitelisting
A: A security engineer wants to restrict employees to only opening certain applications on
their computer. Which of the following techniques is recommended?
Response
All the computer's antivirus programs handle this restriction
Using sandboxing techniques
Using a host-based firewall
Application whitelisting
Q11: Secure Hash Algorithm (SHA)
A: Which of the following hashing algorithms are used in IPsec?(Select all that apply.)
Q12: Message Digest Algorithm 5 (MD5)
, A: Response
AES 192
AES 256
Secure Hash Algorithm (SHA)
Message Digest Algorithm 5 (MD5)
Q13: Cisco NBAR
A: The following figure displays a Cisco IOS command output on a router. What IOS service
is being used to determine the protocols and ports associated with different applications
traversing the router?
Response
Cisco NBAR
Cisco SIO
Cisco CBAC
Cisco IPS
Q14: Peercoin
A: ___ is a P2P crypto currency that utilizes both proof-of-stake and proof-of-work systems.
Response
Peercoin
Peercurrency
Spotify
Lionshare
Q15: detection and analysis
post-incident activity
A: Which two elements of the incident response process are stated in NIST Special
Publication 800-61 r2?(Choose two.)
Response
detection and analysis
post-incident activity
vulnerability management
risk assessment
vulnerability scoring
Q16: sandboxing
A: Which technique could be used by security personnel to analyze a suspicious file in a
safe environment?
Response
whitelisting
baselining
sandboxing
blacklisting
Q17: The TCP/IP implementation is functional.
