Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Feb 20, 2026

Add To Cart

Question 1

Which HTTP header field is used in forensics to identify the type of browser used?

A : ferrer

B : t

C : er-agent

D : cept-language

Answer: C

Question 2

What is the difference between a threat and a risk?

A : reat represents a potential danger that could take advantage of a weakness in a system

B : k represents the known and identified loss or danger in the system

C : k represents the nonintentional interaction with uncertainty in the system

D : reat represents a state of being exposed to an attack or a compromise, either physically or logically.

Answer: A

Question 3

What is the impact of false negative alerts when compared to true negative alerts?

A : A false negative is someone trying to hack into the system and no alert is raised, and a true negative is an event that never happened and an alert was not raised.

B : A true negative is an alert for an exploit attempt when no attack was detected, and a false negative is when no attack happens and an alert is still raised.

C : A true negative is a legitimate attack that triggers a brute force alert, and a false negative is when no alert and no attack is occurring.

D : A false negative is an event that alerts for injection attack when no attack is happening, and a true negative is an attack that happens and an alert that is appropriately raised.

Answer: A

Question 4

Refer to exhibit.

An analyst performs the analysis of the pcap file to detect the suspicious activity. What challenges did the analyst face in terms of data visibility?

A : data encapsulation

B : code obfuscation

C : data encryption

D : IP fragmentation

Answer: C

Question 5

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Page: 1 / 96

Total 480 Questions | Updated On: Feb 20, 2026

Add To Cart