Cisco 200-201 Dumps Questions Answers

A threat is a sum of risks and a risk itself represents a specific danger toward the asset

A threat can be people property, or information, and risk is a probability by which these threats may bring harm to the business

A risk is a flaw or hole in security, and a threat is what is being used against that flaw

A risk is an intersection between threat and vulnerabilities, and a threat is what a security engineer is trying to protect against

scanning servers and workstations for missing patches and vulnerabilities

managing and keeping previous patches lists documented for audit purposes

process of appropriate distribution of system or software updates

workflow of distributing mitigations of newly found vulnerabilities

Known vulnerabilities are assigned special CVE numbers, and exploits are using process to take advantage of vulnerabilities.

Vulnerabilities can be found in hardware and software, and exploits can be used only for software-based vulnerabilities.

Zero-day exploit can be used to take advantage of a vulnerability until the vulnerable software or hardware is patched.

Vulnerabilities are usually populated in the dark web, and exploit tools and methods can be found in the public web.

Zero-day exploit can be used for taking advantage of a known vulnerability, and cyber-attack can be performed on company assets.