Exam 200-201 topic 1 question 323 discussion

Actual exam question from Cisco's 200-201

Question #: 323
Topic #: 1

Refer to the exhibit. A security analyst received a ticket about suspicious traffic from one of the workstations. During the investigation, the analyst discovered that the workstation is communicating with an external IP The analyst was not able to investigate further and escalated the case to a T2 security analyst. What are the two data visibility challenges that the security analyst should identify? (Choose two.)

A. A default user agent is present in the headers.
B. Traffic is not encrypted.
C. Encrypted data is being transmitted.
D. POST requests have a "Microsoft-IIS/7.5" server header.
E. HTTP requests and responses are sent in plaintext.

Show Suggested Answer

Suggested Answer: BE 🗳️

by Tricejer at April 30, 2024, 3:07 a.m.

Comments

Submit Cancel

036e554

2 weeks, 1 day ago

Selected Answer: AD

The question goes does... What are the two data visibility challenges that the security analyst should identify? From the exhibit the visible challenge the security analyst will be A, D

upvoted 1 times

...

2c44ebe

1 month, 2 weeks ago

Selected Answer: AE

The traffic is not encrypted: The POST method does not encrypt data by itself, and in this case, HTTP is used instead of HTTPS, which means there is no TLS protection. Since the request is made over HTTP, both the request and the response travel in plaintext, allowing any intermediary on the network to easily read the content.

upvoted 1 times

...