Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS): 200-201

Refer to the exhibit.

Which field contains DNS header information if the payload is a query or response?

A. ID

B. Z

C. QR

D. TC

Which list identifies the information that the client sends to the server in the negotiation phase of the TLS handshake?

A. ClientStart, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

B. ClientStart, TLS versions it supports, cipher-suites it supports, and suggested compression methods

C. ClientHello, TLS versions it supports, cipher-suites it supports, and suggested compression methods

D. ClientHello, ClientKeyExchange, cipher-suites it supports, and suggested compression methods

According to the September 2020 threat intelligence feeds a new malware called Egregor was introduced and used in many attacks. Distnbution of Egregor is pnmanly through a Cobalt Strike that has been installed on victim's workstations using RDP exploits Malware exfiltrates the victim's data to a command and control server. The data is used to force victims pay or lose it by publicly releasing it. Which type of attack is described?

A. malware attack

B. ransomware attack

C. whale-phishing

D. insider threat