Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

Refer to the exhibit. A SOC engineer is analyzing the provided Cuckoo Sandbox report for a file that has been downloaded from an URL, received via email. What is the state of this file?

A : The file was identified as PE32 executable for MS Windows and the Yara filed lists it as Trojan.

B : The file was detected as executable and was matched by PEiD threat signatures for further analysis.

C : The file was detected as executable, but no suspicious features are identified.

D : The calculated SHA256 hash of the file was matched and identified as malicious.

Answer: A

Question 2

A vulnerability is discovered on a network. If successfully exploited, it will completely remove the ability of the system to limit disclosure of information to an unauthorized user. Which concept and value describes this vulnerability?

A : confidentiality, none

B : availability, none

C : availability, high

D : confidentiality, high

Answer: D

Question 3

An engineer must compare NIST vs ISO frameworks The engineer deeded to compare as readable documentation and also to watch a comparison video review. Using Windows 10 OS. the engineer started a browser and searched for a NIST document and then opened a new tab in the same browser and searched for an ISO document for comparison

The engineer tried to watch the video, but there 'was an audio problem with OS so the engineer had to troubleshoot it At first the engineer started CMD and looked fee a driver path then locked for a corresponding registry in the registry editor The engineer enabled 'Audiosrv' in task manager and put it on auto start and the problem was solved Which two components of the OS did the engineer touch? (Choose two)

A : rmissions

B : werShell logs

C : rvice

D : R

E : ocess and thread

Answer: A,C

Question 4

Which piece of information is needed for attribution in an investigation?

A : oxy logs showing the source RFC 1918 IP addresses

B : P allowed from the Internet

C : own threat actor behavior

D : 802.1x RADIUS authentication pass arid fail logs

Answer: C

Question 5

Which incidence response step includes identifying all hosts affected by an attack?

A : tection and analysis

B : t-incident activity

C : eparation

D : ntainment, eradication, and recovery

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: Sep 22, 2026

Add To Cart