Cisco Updated 200-201 Exam Questions and Answers by mikail

A man-in-the-middle (MITM) attack occurs when an attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other. In this scenario, an attacker can observe network traffic exchanged between two users by placing themselves in between their communication channel. References := Cisco Blogs - New Cybersecurity and Cloud Skills to Protect Companies from Cybersecurity Attacks of the Future

The exhibit shows “HKEY_LOCAL_MACHINE,” which is a Windows Registry hive. The registry is a database used to store low-level settings for the operating system and for applications that opt to use the registry. The other options are not related to the exhibit, as they are either a part of the Windows Certificate Manager, a naming convention for Windows PowerShell commands, or a component of the Windows Services Manager. References := Cisco Cybersecurity

https://docs .microsoft.com/en-us/windows/win32/sysinfo/registry-hives

https://ldapwiki.com/wik i/HKEY_LOCAL_MACHINE#:~:text=HKEY_LOCAL_MACHINE%20Windows%20registry%20hive%20contains,detected%20hardware%20and%20device%20drivers.

• A Distributed Denial of Service (DDoS) attack involves multiple compromised devices (botnet) sending a large number of requests to a target server to overwhelm it.
• In a specific type of DDoS attack known as an NTP amplification attack, the attacker exploits the Network Time Protocol (NTP) servers by sending small queries with a spoofed source IP address (the target’s IP).
• The NTP server responds with a much larger reply to the target’s IP address, thereby amplifying the traffic directed at the target.
• This reflection and amplification technique significantly increases the volume of traffic sent to the target, causing denial of service.

References

• OWASP DDoS Attack Overview
• NTP Amplification Attack Explained
• Understanding Botnets and Distributed Attacks

Reflective XSS, also known as Non-Persistent XSS, occurs when an attacker sends a malicious script to a user through a web application, and the script is executed immediately in the user’s browser without being stored on the server. This type of attack is typically carried out by including the malicious script in a URL, which is then sent to the victim. When the victim clicks on the link, the script runs in their browser, reflecting the attacker’s actions without storing the payload for repeated use12. References: OWASP Foundation’s documentation on Cross-Site Scripting (XSS) provides detailed information on the different types of XSS attacks, including Reflective XSS