Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Cisco
CyberOps Associate
200-201
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Questions and Answers

Pass the Cisco CyberOps Associate 200-201 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 200-201 Premium Access

View all detail and faqs for the 200-201 exam

Go to Exam

794 Students Passed

89% Average Score

95% Same Questions

Viewing page 2 out of 15 pages

Viewing questions 11-20 out of questions

Questions # 11:

An analyst performs traffic analysis to detect data exfiltration and identifies a high frequency of DNS requests in a small period of time Which technology makes this behavior feasible?

Options:

access control list

NAT

tunneling

encryption

Answer

Questions # 12:

Drag and drop the uses on the left onto the type of security system on the right.

Question # 12

Options:

Answer

Answer:

Questions # 13:

What does the SOC metric MTTC provide in incident analysis'?

Options:

average time it takes to fix the issues caused by the incident

average time it takes to recognize and stop the incident

average time it takes to detect that the incident has occurred

average time the attacker has access to the environment

Answer

Questions # 14:

What are two differences of deep packet inspection compared to stateful firewall inspection? (Choose two.)

Options:

static lists for maintaining a strict access control level

offers application-level monitoring

inspection of only the first packet during a connection attempt

different rule configurations based on payload pattern

quality of service capabilities based on list definitions

Answer

B, D

Questions # 15:

Which type of attack occurs when an attacker is successful in eavesdropping on a conversation between two IP phones?

Options:

known-plaintext

replay

dictionary

man-in-the-middle

Answer

Explanation

A man-in-the-middle attack occurs when a third party intercepts and potentially alters the communication between two parties (in this case, two IP phones) without them knowing. This type of attack can lead to eavesdropping, where the attacker can gain unauthorized access to sensitive data being communicated between the two parties. References := Cisco Cybersecurity Operations Fundamentals - Module 5: Endpoint Threat Analysis and Computer Forensics

Questions # 16:

An engineer received a flood of phishing emails from HR with the source address HRjacobm@companycom. What is the threat actor in this scenario?

Options:

phishing email

sender

receiver

Answer

Explanation

In the context of phishing emails, the threat actor is the entity that is responsible for initiating the threat, which in this case is the sender of the phishing emails. The sender is impersonating the HR department to deceive the receiver into believing that the emails are legitimate

Questions # 17:

What is the function of a command and control server?

Options:

It enumerates open ports on a network device

It drops secondary payload into malware

It is used to regain control of the network after a compromise

It sends instruction to a compromised system

Answer

Explanation

A command and control server (C2 or C&C) is a server that is used by attackers to communicate with and control compromised systems, such as bots, zombies, or backdoors. The C2 server can send instructions to the compromised systems, such as executing commands, downloading files, uploading data, or launching attacks. The C2 server can alsoreceive information from the compromised systems, such as system information, keystrokes, screenshots, or credentials. References:

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) v1.0, Module 3: Network Intrusion Analysis, Lesson 3.4: Malware

Cisco Certified CyberOps Associate Overview, Exam Topics, 3.4 Compare and contrast types of malware

Questions # 18:

Drag and drop the security concept on the left onto the example of that concept on the right.

Question # 18

Options:

Answer

Answer:

Questions # 19:

Which type of access control depends on the job function of the user?

Options:

discretionary access control

nondiscretionary access control

role-based access control

rule-based access control

Answer

Explanation

Role-Based Access Control (RBAC) is an approach to restricting system access to authorized users based on their roles within an organization. It depends on the job functions that individual users have as part of their responsibilities and is designed to reduce administrative work by assigning roles based on job competency, authority, and responsibility. References: Cisco Cybersecurity Operations Fundamentals, Module 1: Security Concepts, Lesson 1.2: Data Protection, Topic 1.2.2: Access Control Models

Questions # 20:

A CMS plugin creates two files that are accessible from the Internet myplugin html and exploitable php A newly discovered exploit takes advantage of an injection vulnerability m exploitable php To exploit the vulnerability an HTTP POST must be sent with specific variables to exploitable php A security engineer notices traffic to the webserver that consists of only HTTP GET requests to myplugin html Which category does this activity fall under?