Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: May 22, 2026

Add To Cart

Question 1

An engineer must investigate suspicious connections. Data has been gathered using a tcpdump command on a Linux device and saved as sandboxmalware2022-12-22.pcaps file. The engineer is trying to open the tcpdump in the Wireshark tool. What is the expected result?

A : The file is opened.

B : The tool does not support Linux.

C : The file does not support the “-“ character.

D : The file has an incorrect extension.

Answer: A

Question 2

What does an attacker use to determine which network ports are listening on a potential target device?

A : n-in-the-middle

B : rt scanning

C : L injection

D : ng sweep

Answer: B

Question 3

An organization has recently adjusted its security stance in response to online threats made by a known hacktivist group.
What is the initial event called in the NIST SP800-61?

A : line assault

B : ecursor

C : igger

D : tigator

Answer: B

Question 4

Refer to the exhibit.

What is occurring in this network?

A : ARP cache poisoning

B : DNS cache poisoning

C : MAC address table overflow

D : MAC flooding attack

Answer: A

Question 5

Which artifact is used to uniquely identify a detected file?

A : le timestamp

B : le extension

C : le size

D : le hash

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: May 22, 2026

Add To Cart