Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Aug 02, 2026

Add To Cart

Question 1

An engineer must investigate suspicious connections. Data has been gathered using a tcpdump command on a Linux device and saved as sandboxmalware2022-12-22.pcaps file. The engineer is trying to open the tcpdump in the Wireshark tool. What is the expected result?

A : The file is opened.

B : The tool does not support Linux.

C : The file does not support the “-“ character.

D : The file has an incorrect extension.

Answer: A

Question 2

Which piece of information is needed for attribution in an investigation?

A : oxy logs showing the source RFC 1918 IP addresses

B : P allowed from the Internet

C : own threat actor behavior

D : 802.1x RADIUS authentication pass arid fail logs

Answer: C

Question 3

Refer to the exhibit.

Which field contains DNS header information if the payload is a query or a response?

A : Z

B : ID

C : TC

D : QR

Answer: B

Question 4

What describes a buffer overflow attack?

A : jecting new commands into existing buffers

B : tching data from memory buffer registers

C : erloading a predefined amount of memory

D : ppressing the buffers in a process

Answer: C

Question 5

Refer to the exhibit.

Which stakeholders must be involved when a company workstation is compromised?

A : Employee 1 Employee 2, Employee 3, Employee 4, Employee 5, Employee 7

B : Employee 1, Employee 2, Employee 4, Employee 5

C : Employee 4, Employee 6, Employee 7

D : Employee 2, Employee 3, Employee 4, Employee 5

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: Aug 02, 2026

Add To Cart