200-201 by Cisco Actual Free Exam Q&As

Question 1

An engineer must verify vulnerabilities found in the scanning process. The engineer checks the impact of those findings to the organization and compares the results with known threats inside organization. What is the benefit of knowing this information?

A. A pcap file can be prepared. B. Logs can be gathered. C. Risk can be calculated. D. An exploit can be built.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. In the PCAP file, what is the MAC address of the server that has 443 port open?

A. unknown B. b4:2a:0e:f2:27:83 C. IntelCor_9f:d1:fc D. 7c:5c:f8:9f:d1:fc

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Which statement describes patch management?

A. managing and keeping previous patches lists documented for audit purposes B. workflow of distributing mitigations of newly found vulnerabilities C. scanning servers and workstations for missing patches and vulnerabilities D. process of appropriate distribution of system or software updates

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 4

Which tool provides a full packet capture from network traffic?

A. Nagios B. Wireshark C. Hydra D. CAINE

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 5

According to the September 2020 threat intelligence feeds a new malware called Egregor was introduced and used in many attacks. Distnbution of Egregor is pnmanly through a Cobalt Strike that has been installed on victim's workstations using RDP exploits Malware exfiltrates the victim's data to a command and control server. The data is used to force victims pay or lose it by publicly releasing it.
Which type of attack is described?

A. whale-phishing B. insider threat C. malware attack D. ransomware attack

Discussion 0

Correct Answer: D Vote an answer

Question 6

What is the purpose of a SIEM solution?

A. to collect and forward event logs to another log collection device to evaluate security threats B. to collect and categorize indicators of compromise to evaluate and search for potential security threats C. to collect and correlate event log data to provide holistic views of the security posture of an environment D. to monitor and manage firewall access control lists for duplicate firewall filtering

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. Where is the executable file?

A. name B. info C. MIME D. tags

Discussion 0

Correct Answer: C Vote an answer

Question 8

For which items is an end-point application greylist used?

A. items before being established as harmful or malicious B. items that have been installed with a baseline C. items that have been established as malicious D. items that have been established as authorized

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit. What does the message indicate?

A. a successful access attempt was made to retrieve the password file B. a denied access attempt was made to retrieve the password file C. an access attempt was made from the Mosaic web browser D. a successful access attempt was made to retrieve the root of the website

Discussion 0

Correct Answer: D Vote an answer

Cisco Understanding Cisco Cybersecurity Operations Fundamentals - 200-201 Exam Practice Test