Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Jul 24, 2026

Add To Cart

Question 1

Refer to the exhibit.

An engineer is analyzing a PCAP file after a recent breach An engineer identified that the attacker used an aggressive ARP scan to scan the hosts and found web and SSH servers. Further analysis showed several SSH Server Banner and Key Exchange Initiations. The engineer cannot see the exact data being transmitted over an encrypted channel and cannot identify how the attacker gained access How did the attacker gain access?

A : by using the buffer overflow in the URL catcher feature for SSH

B : by using an SSH Tectia Server vulnerability to enable host-based authentication

C : by using an SSH vulnerability to silently redirect connections to the local host

D : by using brute force on the SSH service to gain access

Answer: C

Question 2

What is the purpose of a ransomware attack?

A : to escalate privileges

B : to make files inaccessible by encrypting the data

C : to send keystrokes to a threat actor

D : to decrypt encrypted data and disks

Answer: B

Question 3

An engineer must investigate suspicious connections. Data has been gathered using a tcpdump command on a Linux device and saved as sandboxmalware2022-12-22.pcaps file. The engineer is trying to open the tcpdump in the Wireshark tool. What is the expected result?

A : The file is opened.

B : The tool does not support Linux.

C : The file does not support the “-“ character.

D : The file has an incorrect extension.

Answer: A

Question 4

Refer to exhibit.

An analyst performs the analysis of the pcap file to detect the suspicious activity. What challenges did the analyst face in terms of data visibility?

A : data encapsulation

B : code obfuscation

C : data encryption

D : IP fragmentation

Answer: C

Question 5

What is the difference between deep packet inspection and stateful inspection?

A : ateful inspection verifies contents at Layer 4. and deep packet inspection verifies connection at Layer 7.

B : ateful inspection is more secure than deep packet inspection on Layer 7.

C : ep packet inspection is more secure than stateful inspection on Layer 4.

D : ep packet inspection allows visibility on Layer 7, and stateful inspection allows visibility on Layer 4.

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: Jul 24, 2026

Add To Cart