200-201 Questions Bank

Port scanning is a technique that an attacker uses to discover which network ports are open, closed, or filtered on a target device. By sending packets to different ports and observing the responses, an attacker can identify the services and applications running on the device, as well as potential vulnerabilities that can be exploited. Port scanning is a common reconnaissance activity that precedes an attack. References: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) - Cisco, page 2-6; 200-201 CBROPS - Cisco, exam topic 1.1.a

 Full packet capture provides the complete recording of all the packets that are transmitted over the network. This data is essential for in-depth analysis during an investigation, as it allows investigators to reconstruct the session, observe the content of the traffic, and determine if data exfiltration has occurred.

References: Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) study materials would typically cover the importance of full packet capture in network forensics and incident response.

 Separation of duties is a security principle that requires more than one person to perform a critical task, such as authorizing a transaction, approving a budget, or granting access to sensitive data. Separation of duties reduces the risk of fraud, error, abuse, or conflict of interest by preventing any single person from having too much power or privilege. Least privilege, need to know, and due diligence are other security principles, but they do not require more than one person to perform a critical task. References: Separation of Duty (SOD) - Glossary | CSRC - NIST Computer Security …, Separation of Duties | Imperva

In cybersecurity, a threat is any potential malicious attack or event that can harm an organization, while a risk is the potential damage or loss that could occur if a threat exploits a vulnerability. Therefore, risk is considered the intersection of threats and vulnerabilities, representing the likelihood and impact of a threat materializing.