Securing Cisco Networks with Threat Detection and Analysis (600-199) Free Practice Test

Question 1

Refer to the exhibit.

What does the tcpdump command do?

A. Capture up to 1514 bytes, do not resolve DNS names, print all TCP packets except for those containing the SYN flag, and print the Ethernet header and be very verbose.

B. Capture up to 1514 bytes, do not resolve DNS names, print only TCP packets containing the SYN flag, and print the Ethernet header and be very verbose.

C. Capture all packets sourced from TCP port 1514, resolve DNS names, print all TCP packets with the SYN flag not equaling 0, and print the Ethernet header and all version information.

D. Capture all packets sourced from TCP port 1514, resolve DNS names, print all TCP packets except those containing the SYN flag, and print the Ethernet header and all version information.

Correct Answer: B

Question 2

Refer to the exhibit.

Which protocol is used in this network traffic flow?

A. SNMP

B. DNS

C. SSH

D. Telnet

Correct Answer: C

Question 3

In what sequence do the proper eradicate/recovery steps take place?
1) Re-image 2) Restore 3) Patch 4) Backup

A. 1, 3, 4, 2

B. 1, 2, 3, 4

C. 4, 1, 3, 2

D. 4, 3, 2, 1

Correct Answer: C

Question 4

What is the most effective way to save the data on a system for later forensic use?

A. Shut down the system.

B. Copy the files to another disk.

C. Use a hard duplicator with write-block capabilities.

D. Copy the disk file by file.

Correct Answer: C

Question 5

Which three statements are true about the IP fragment offset? (Choose three.)

A. A fragment offset is measured in 8-byte units.

B. A fragment offset is measured in 16-byte units.

C. A fragment offset of 0 indicates that it is the first in a series of fragments.

D. A fragment offset number refers to the number of fragments.

E. A fragment offset helps determine the position of the fragment within the reassembled datagram.

Correct Answer: A,C,E

Question 6

Where should you report suspected security vulnerability in Cisco router software?

A. Cisco SIO

B. Cisco IOS Engineering

C. Cisco TAC

D. Cisco PSIRT

Correct Answer: D

Welcome to TestSimulate

Cisco Securing Cisco Networks with Threat Detection and Analysis (600-199) Free Practice Test