Question 1

Refer to the exhibit.

Which type of log is displayed?

Options :

A : IDS

B : proxy

C : NetFlow

D : sys

Answer: A

Question 2

An analyst is investigating an incident in a SOC environment. Which method is used to identify a session from a group of logs?

Options :

A : sequence numbers

B : IP identifier

C : 5-tuple

D : timestamps

Answer: C

Question 3

A developer is working on a project using a Linux tool that enables writing processes to obtain these required results:
If the process is unsuccessful, a negative value is returned.
If the process is successful, 0 value is returned to the child process, and the process ID is sent to the parent process.
Which component results from this operation?

Options :

A : parent directory name of a file pathname

B : process spawn scheduled

C : macros for managing CPU sets

D : new process created by parent process

Answer: D

Question 4

Refer to the exhibit.

Which field contains DNS header information if the payload is a query or a response?

Options :

A : Z

B : ID

C : TC

D : QR

Answer: B

Question 5

What describes a buffer overflow attack?

Options :

A : injecting new commands into existing buffers

B : fetching data from memory buffer registers

C : overloading a predefined amount of memory

D : suppressing the buffers in a process

Answer: C

Higher Test Marks with Free Online 200-201 Exam Practice

Buying Options: