Question 1

An employee receives an urgent email claiming that their email account will be disabled unless they log in immediately through a provided link. The email includes a realistic-looking company logo and signature but uses a slightly misspelled domain name. Which phishing techniques are demonstrated in this scenario? (Choose two)

Options :

A : Whaling

B : Domain spoofing

C : Clone phishing

D : Email spoofing

E : Spear phishing

Answer: B,D

Question 2

An organization uses Kubernetes to manage its containerized workloads in a multi-cloud environment. They want to ensure their CNSP solution provides comprehensive workload security. Which feature is most critical for addressing workload security in this context?

Options :

A : Manually reviewing YAML files for misconfigurations

B : Disabling unused ports in the container orchestration layer

C : Automated container image vulnerability scanning before deployment

D : Relying on cloud provider-native security tools for all workloads

Answer: C

Question 3

A security team is implementing a Cloud Native Security Platform (CNSP) to manage its multi-cloud environment. Which of the following capabilities is most critical for maintaining an accurate asset inventory in the cloud?

Options :

A : Real-time discovery and classification of cloud resources and workloads.

B : Manual updates of resource metadata by administrators.

C : Static resource tagging policies enforced during deployment.

D : Application performance monitoring integrated with a dashboard.

Answer: A

Question 4

Which of the following data sources can Cortex XDR use to detect and investigate security incidents?

Options :

A : Only endpoint data collected from managed devices.

B : Raw packet captures from all network interfaces.

C : Firewall logs and email logs exclusively.

D : Endpoint, network, and cloud data for extended detection and response.

Answer: D

Question 5

Which of the following characteristics is most commonly associated with spamming botnets?

Options :

A : They primarily perform brute force attacks to compromise user credentials.

B : They send large volumes of unsolicited emails or messages using compromised devices.

C : They mine cryptocurrency on compromised devices without the owner-s consent.

D : They generate fraudulent clicks on advertisements to increase revenue for attackers.

Answer: B

Higher Test Marks with Free Online Cybersecurity-Practitioner Exam Practice

Buying Options: