Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: May 10, 2026

Add To Cart

Question 1

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Question 2

The SOC team has confirmed a potential indicator of compromise on an isolated endpoint. The team has narrowed the potential malware type to a new trojan family. According to the NIST Computer Security Incident Handling Guide, what is the next step in handling the event?

A : Perform an AV scan on the infected endpoint.

B : Isolate the infected endpoint from the network.

C : Prioritize incident handling based on the impact.

D : Analyze the malware behavior.

Answer: D

Question 3

What describes a buffer overflow attack?

A : jecting new commands into existing buffers

B : tching data from memory buffer registers

C : erloading a predefined amount of memory

D : ppressing the buffers in a process

Answer: C

Question 4

Refer to the exhibit.

Which type of attack is being executed?

A : SQL injection

B : cross-site scripting

C : cross-site request forgery

D : command injection

Answer: A

Question 5

Which element is included in an incident response plan as stated in NIST.SP800-617

A : security of sensitive information

B : individual approach to incident response

C : consistent threat identification

D : approval of senior management

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: May 10, 2026

Add To Cart