1.9 Identify Potential Data Loss from Traffic Profiles 200-201 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which protocol anomaly could indicate data exfiltration?

   • ADNS queries with unusually long subdomains
   • BTCP handshakes completing successfully
   • CICMP echo replies matching echo requests
   • DHTTP responses with standard status codes
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which technique is used to compare current traffic against a baseline to detect deviations?

   • AStatistical analysis of traffic volume and patterns
   • BManual review of every packet
   • CDeploying additional firewalls
   • DChanging the network topology
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which action is part of correlating traffic with a potential data loss event?

   • ADisabling the network interface
   • BRebooting the affected server
   • CMatching the anomaly to a known data loss pattern
   • DChanging all user passwords
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common vector for data loss?

   • ALocal file access on a workstation
   • BPrinter spooling
   • CEmail attachments sent to external recipients
   • DInternal DNS resolution
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst is reviewing traffic logs and notices that a workstation has been sending a large number of HTTP POST requests to a website that hosts a file-sharing service. The requests are occurring outside normal business hours and the payload sizes are unusually large. The workstation belongs to an employee who has no business need to use that service. What does this traffic profile most likely indicate?

   • AA user browsing the web during off-hours.
   • BA malware infection attempting to download updates.
   • CPotential data exfiltration via web uploads.
   • DA legitimate backup process running automatically.
   Reveal Solution Discussion Select an answer first