350-201(NEW-127Q) Exam Questions

A software company is adopting a SecDevOps approach to improve the security integration in its development cycle for a new cloud-based application suite. The suite includes custome...

Cyber threat actors infiltrated a software developer company and modified a security patch to include a malicious backdoor. The security updates installed modified patches on custo...

Refer to the exhibit. Which data format is being used?

An engineer is moving data from NAS servers in different departments to a combined storage database so that the data can be accessed and analyzed by the organization on-demand. Whi...

The incident response team of an organization uncovers a complex cyber attack involving multiple endpoints, advanced malware, and data exfiltration. The team successfully contained...

A CIO of a Health Care facility recently experienced theft of customer data. The CIO is focused on numerous potential threat vectors and wants to implement improved detection and p...

A threat research lab is analyzing malware that employs polymorphic techniques to constantly modify its code structure. Which sequence of actions should the cybersecurity experts f...

A SOC analyst detects malware that is destined for a Linux-based OS. After using fully automated tools, the analyst used automated inspection tools but also decides to examine the...

A security analyst is examining network traffic patterns to determine the sequence of events during a cyber attack on an organization's web server. The analyst has collected the in...

Employees receive an email from an executive within the organization that summarizes a recent security breach and requests that employees verify their credentials through a provide...

A security analyst is investigating an attack on an organization's database server and must determine the sequence of events based on the analysis of traffic patterns. The observat...

The engineer discovered a security breach, and upon further analysis, discovered a malware presence on several assets. According to the incident response workflow, which steps shou...

An organization had a ransomware event. The engineer working the case discovered an unknown binary file and sent it to the Cisco Secure Malware Analytics for analysis. Which step m...

Which tools should a security team use to perform advanced security data analytics to identify sophisticated threats within large datasets?

A security operations team is experiencing frequent false positives from detection rules designed to flag suspicious outbound network traffic in their SIEM system. The rules are ba...

An organization plans to become ISO 27001 compliant and asked a compliance team to complete the initial implementation project. Which type of information is appropriate to present...

An EDR system alerted the incident response team about the activity of malicious files on the HR manager endpoint. The infected endpoint was isolated from the network. Further exam...

Security Engineer has received alert from the DLP system that a certain marketing team user has created 20 image files, exactly the same size except for the last one, with a total...

An engineer received an alert from an intrusion detection system that suspicious network traffic was initiated from the internal network. Further analysis showed unexplained use of...

An organization in the automotive industry is using multifunction devices that use SMB v1. An engineer must establish communication between legacy devices and must disable obsolete...

A security engineer must deploy a new server for the accounting department. The engineer prepared the server and applications list to be installed. According to the company's IT se...

An organization is conducting a vulnerability triage and risk analysis. The security team wants to prioritize vulnerabilities effectively using industry scoring systems. Which meth...

Refer to the exhibit. An engineer is trying to access a website and the browser shows this error. Which tool should be used to check the URL disposition?

During an internal audit, an information security officer discovered that some non-authorized users have executable privileges on all files in the system, but the script did not wo...

An engineer is analyzing a case of an employee receiving a seemingly trustworthy email that included a link to a management feedback request. The employee opened the link and was r...

An organization detected unauthorized access to its customer database that contains sensitive PII. The incident response team must respond swiftly using automation and escalation p...

A large amount of malicious spam was detected with suspicious attachments. The attachments are being automatically submitted to a free online malware analysis resource for review....

An organization is undergoing a network hardening initiative to defend against increasingly sophisticated cyber threats. Their infrastructure supports multiple interconnected servi...

An engineer is investigating a compromised host on the network that was flagged by an advanced threat detection system. Upon further analysis, the engineer discovers that the infec...

A medical center managing board decides to use activity trackers to evaluate patients more accurately by recording their heart rate and accelerometer data simultaneously. Trackers...

What does the process of hardening machine images involve when preparing them for deployment in an IT infrastructure?

Refer to the exhibit. In a corporate environment, a cybersecurity analyst is responsible for monitoring Windows server audit logs for security incidents. During routine log analysi...

What is an open-source automation solutions for continuous integration, delivery, and deployment?

A thief has broken into the CEO's car and stolen the executive laptop. The criminal is currently running it with forward-facing dawn shop. The machine is encrypted, backed up, and...

An IT manager at a manufacturing company is conducting a risk analysis involving the company's digital asset management system, network vulnerabilities, and potential external cybe...

Refer to the exhibit. Vulnerability 1: Outdated web server software Vulnerability 2: Insecure SSL/TLS configurations Vulnerability 3: Unpatched database management system Vulnerabi...

An engineer must mitigate a recent zero-day vulnerability affecting RDP service where an attacker connects to a targeted system and sends crafted requests, followed by an arbitrary...

Refer to the exhibit. An engineer is performing static analysis on malware and knows that it is capturing keys and webcam events on a company server. What is the indicator of compr...

Refer to the exhibit. What is occurring within the exhibit?

While analyzing traffic from an API authentication request, an analyst identifies the header: "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3OCIsIn...

A financial institution's incident response team is revising their playbook to specifically address incidents of wire-transfer fraud, which have become increasingly sophisticated....

A security analyst is investigating a whaling attack via cross-correlated events from SIEM, a detailed log of proxy sessions, and EDR logs. During the investigation, the analyst de...

In a scenario where a large healthcare provider is revamping its cybersecurity strategy, it faces potential risks from sophisticated cyber threats like targeted ransomware, insider...

An employee abused PowerShell commands and script interpreters which lead to IOC triggers. An IOC event shows that a known malicious file ran which increased the likelihood of a su...

Which HTTP response code is associated with a request that requires more user information?

When consuming APIs with security constraints like rate limits and timeouts, which combination of techniques must a security team implement to ensure API requests are processed eff...

A security analyst reviews a playbook scenario that describes the steps to be taken in response to a ransomware attack targeting the organization. The scenario includes the identif...

Refer to the exhibit. Which data format is used?

An IT security team detects an unauthorized access to their development environment on few QA team machines. According to the incident response workflow, which sequence of actions...

Refer to the exhibit. A system administrator has recently submitted a file for malware analysis to Cisco Secure Malware Analytics. According to this Cisco Secure Malware Analytics...