Free Cisco 200-201 Exam Questions

Question 1

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Question 2

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Question 3

Refer to the exhibit.

A network administrator is investigating suspicious network activity by analyzing captured traffic. An engineer notices abnormal behavior and discovers that the default user agent is present in the headers of requests and data being transmitted What is occurring?

A : indicators of denial-of-service attack due to the frequency of requests

B : garbage flood attack attacker is sending garbage binary data to open ports

C : indicators of data exfiltration HTTP requests must be plain text

D : cache bypassing attack: attacker is sending requests for noncacheable content

Answer: C

Question 4

An engineer must investigate suspicious connections. Data has been gathered using a tcpdump command on a Linux device and saved as sandboxmalware2022-12-22.pcaps file. The engineer is trying to open the tcpdump in the Wireshark tool. What is the expected result?

A : The file is opened.

B : The tool does not support Linux.

C : The file does not support the “-“ character.

D : The file has an incorrect extension.

Answer: A

Question 5

Why is encryption challenging to security monitoring?

A : cryption analysis is used by attackers to monitor VPN tunnels.

B : cryption is used by threat actors as a method of evasion and obfuscation.

C : cryption introduces additional processing requirements by the CPU.

D : cryption introduces larger packet sizes to analyze and store.

Answer: B