Cisco CyberOps Associate 200-201 Questions & Answers

• Question 221:

  Refer to the exhibit.

  

  Which technology generates this log?

  A. NetFlow

  B. IDS

  C. web proxy

  D. firewall

  Correct Answer: D

• Question 222:

  Refer to the exhibit.

  

  What is shown in this PCAP file?

  A. Timestamps are indicated with error.

  B. The protocol is TCP.

  C. The User-Agent is Mozilla/5.0.

  D. The HTTP GET is encoded.

  Correct Answer: D

• Question 223:

  Which are two denial-of-service attacks? (Choose two.)

  A. TCP connections

  B. ping of death

  C. man-in-the-middle

  D. code-red

  E. UDP flooding

  Correct Answer: BE

• Question 224:

  Which two pieces of information are collected from the IPv4 protocol header? (Choose two.)

  A. UDP port to which the traffic is destined

  B. TCP port from which the traffic was sourced

  C. source IP address of the packet

  D. destination IP address of the packet

  E. UDP port from which the traffic is sourced

  Correct Answer: CD

• Question 225:

  Refer to the exhibit.

  

  What is occurring in this network?

  A. ARP cache poisoning

  B. DNS cache poisoning

  C. MAC address table overflow

  D. MAC flooding attack

  Correct Answer: A

• Question 226:

  An engineer must compare NIST vs ISO frameworks The engineer deeded to compare as readable documentation and also to watch a comparison video review. Using Windows 10 OS. the engineer started a browser and searched for a NIST document and then opened a new tab in the same browser and searched for an ISO document for comparison

  The engineer tried to watch the video, but there 'was an audio problem with OS so the engineer had to troubleshoot it At first the engineer started CMD and looked fee a driver path then locked for a corresponding registry in the registry editor The engineer enabled "Audiosrv" in task manager and put it on auto start and the problem was solved Which two components of the OS did the engineer touch? (Choose two)

  A. permissions

  B. PowerShell logs

  C. service

  D. MBR

  E. process and thread

  Correct Answer: AC

• Question 227:

  What is the difference between deep packet inspection and stateful inspection?

  A. Stateful inspection verifies contents at Layer 4. and deep packet inspection verifies connection at Layer 7.

  B. Stateful inspection is more secure than deep packet inspection on Layer 7.

  C. Deep packet inspection is more secure than stateful inspection on Layer 4.

  D. Deep packet inspection allows visibility on Layer 7, and stateful inspection allows visibility on Layer 4.

  Correct Answer: D

• Question 228:

  Which type of data consists of connection level, application-specific records generated from network traffic?

  A. transaction data

  B. location data

  C. statistical data

  D. alert data

  Correct Answer: A

• Question 229:

  Refer to the exhibit.

  

  Which kind of attack method is depicted in this string?

  A. cross-site scripting

  B. man-in-the-middle

  C. SQL injection

  D. denial of service

  Correct Answer: A

• Question 230:

  Which NIST IR category stakeholder is responsible for coordinating incident response among various business units, minimizing damage, and reporting to regulatory agencies?

  A. CSIRT

  B. PSIRT

  C. public affairs

  D. management

  Correct Answer: D