Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Sep 22, 2026

Add To Cart

Question 1

Refer to the exhibit. A SOC engineer is analyzing the provided Cuckoo Sandbox report for a file that has been downloaded from an URL, received via email. What is the state of this file?

A : The file was identified as PE32 executable for MS Windows and the Yara filed lists it as Trojan.

B : The file was detected as executable and was matched by PEiD threat signatures for further analysis.

C : The file was detected as executable, but no suspicious features are identified.

D : The calculated SHA256 hash of the file was matched and identified as malicious.

Answer: A

Question 2

Refer to the exhibit.

What must be interpreted from this packet capture?

A : IP address 192.168.88 12 is communicating with 192 168 88 149 with a source port 74 to destination port 49098 using TCP protocol

B : IP address 192.168.88.12 is communicating with 192 168 88 149 with a source port 49098 to destination port 80 using TCP protocol.

C : IP address 192.168.88.149 is communicating with 192.168 88.12 with a source port 80 to destination port 49098 using TCP protocol.

D : IP address 192.168.88.149 is communicating with 192.168.88.12 with a source port 49098 to destination port 80 using TCP protocol.

Answer: B

Question 3

What is email greylisting by the mail transfer agent?

A : denying any email from a sender it does not recognize

B : returning emails that are potential phishing attempts

C : allowing emails from unknown senders temporarily

D : quarantining emails sent from outside of the organization

Answer: C

Question 4

Which regular expression is needed to capture the IP address 192.168.20.232?

A : ^ (?:[0-9]{1,3}\.){3}[0-9]{1,3}

B : ^ (?:[0-9]f1,3}\.){1,4}

C : ^ (?:[0-9]{1,3}\.)'

D : ^ ([0-9]-{3})

Answer: A

Question 5

An engineer must investigate suspicious connections. Data has been gathered using a tcpdump command on a Linux device and saved as sandboxmalware2022-12-22.pcaps file. The engineer is trying to open the tcpdump in the Wireshark tool. What is the expected result?

A : The file is opened.

B : The tool does not support Linux.

C : The file does not support the “-“ character.

D : The file has an incorrect extension.

Answer: A

Page: 1 / 96

Total 480 Questions | Updated On: Sep 22, 2026

Add To Cart