[Q25-Q45] Latest Cisco 350-201 First Attempt, Exam real Dumps Updated [Jan-2023]

Q25. A European-based advertisement company collects tracking information from partner websites and stores it on a local server to provide tailored ads. Which standard must the company follow to safeguard the resting data?

Q26. Drag and drop the actions below the image onto the boxes in the image for the actions that should be taken during this playbook step. Not all options are used.

Q27. According to GDPR, what should be done with data to ensure its confidentiality, integrity, and availability?

Q28. Refer to the exhibit.

An engineer is analyzing this Vlan0386-int12-117.pcap file in Wireshark after detecting a suspicious network activity. The origin header for the direct IP connections in the packets was initiated by a google chrome extension on a WebSocket protocol. The engineer checked message payloads to determine what information was being sent off-site but the payloads are obfuscated and unreadable. What does this STIX indicate?

Q29. Refer to the exhibit.

Where are the browser page rendering permissions displayed?

Q30. How does Wireshark decrypt TLS network traffic?

Q31. A threat actor used a phishing email to deliver a file with an embedded macro. The file was opened, and a remote code execution attack occurred in a company’s infrastructure. Which steps should an engineer take at the recovery stage?

Q32. An engineer wants to review the packet overviews of SNORT alerts. When printing the SNORT alerts, all the packet headers are included, and the file is too large to utilize. Which action is needed to correct this problem?

Q33. How does Wireshark decrypt TLS network traffic?

Q34. The physical security department received a report that an unauthorized person followed an authorized individual to enter a secured premise. The incident was documented and given to a security specialist to analyze. Which step should be taken at this stage?

Q35. An organization had an incident with the network availability during which devices unexpectedly malfunctioned. An engineer is investigating the incident and found that the memory pool buffer usage reached a peak before the malfunction. Which action should the engineer take to prevent this issue from reoccurring?

Q36. Drag and drop the cloud computing service descriptions from the left onto the cloud service categories on the right.

Q37. Drag and drop the components from the left onto the phases of the CI/CD pipeline on the right.

Q38. Refer to the exhibit.

Which command was executed in PowerShell to generate this log?

Q39. What is a limitation of cyber security risk insurance?

Q40. Refer to the exhibit.

Where is the MIME type that should be followed indicated?

Q41.

Refer to the exhibit. Where are the browser page rendering permissions displayed?

Q42. An engineer detects an intrusion event inside an organization’s network and becomes aware that files that contain personal data have been accessed. Which action must be taken to contain this attack?

Q43.

Refer to the exhibit. Cisco Rapid Threat Containment using Cisco Secure Network Analytics (Stealthwatch) and ISE detects the threat of malware-infected 802.1x authenticated endpoints and places that endpoint into a Quarantine VLAN using Adaptive Network Control policy. Which telemetry feeds were correlated with SMC to identify the malware?

Q44. A security incident affected an organization’s critical business services, and the customer-side web API became unresponsive and crashed. An investigation revealed a spike of API call requests and a high number of inactive sessions during the incident. Which two recommendations should the engineers make to prevent similar incidents in the future? (Choose two.)

Q45. A SOC team receives multiple alerts by a rule that detects requests to malicious URLs and informs the incident response team to block the malicious URLs requested on the firewall. Which action will improve the effectiveness of the process?