Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 96

Total 480 Questions | Updated On: Sep 17, 2026

Add To Cart

Question 1

An investigator is examining a copy of an ISO file that is stored in CDFS format. What type of evidence is this file?

A : ta from a CD copied using Mac-based system

B : ta from a CD copied using Linux system

C : ta from a DVD copied using Windows system

D : ta from a CD copied using Windows

Answer: B

Question 2

Which action should be taken if the system is overwhelmed with alerts when false positives and false negatives are compared?

A : dify the settings of the intrusion detection system.

B : ign criteria for reviewing alerts.

C : define signature rules

D : just the alerts schedule.

Answer: A

Question 3

What is an attack surface as compared to a vulnerability?

A : y potential danger to an asset

B : sum of all paths for data into and out of the environment

C : exploitable weakness in a system or its design

D : individuals who perform an attack

Answer: C

Question 4

Refer to the exhibit.

An analyst was given a PCAP file, which is associated with a recent intrusion event in the company FTP server Which display filters should the analyst use to filter the FTP traffic?

A : dstport == FTP

B : tcp.port==21

C : tcpport = FTP

D : dstport = 21

Answer: C

Question 5

A developer is working on a project using a Linux tool that enables writing processes to obtain these required results:
If the process is unsuccessful, a negative value is returned.
If the process is successful, 0 value is returned to the child process, and the process ID is sent to the parent process.
Which component results from this operation?

A : rent directory name of a file pathname

B : ocess spawn scheduled

C : cros for managing CPU sets

D : w process created by parent process

Answer: D

Page: 1 / 96

Total 480 Questions | Updated On: Sep 17, 2026

Add To Cart