Free Cisco 200-201 Exam Questions

Question 1

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Question 2

Which element is included in an incident response plan as stated in NIST.SP800-617

A : security of sensitive information

B : individual approach to incident response

C : consistent threat identification

D : approval of senior management

Answer: D

Question 3

What is an attack surface as compared to a vulnerability?

A : y potential danger to an asset

B : sum of all paths for data into and out of the environment

C : exploitable weakness in a system or its design

D : individuals who perform an attack

Answer: C

Question 4

Refer to the exhibit.An analyst receives an IDS alert pertaining to a possible data exfiltration attempt. An additional set of logs iscollected from different systems and analyzed. Which type of evidence do the logs provide in relation to theprimary alert from the IDS?

A : corroborative evidence

B : primary evidence

C : circumstantial evidence

D : secondary evidence

Answer: A

Question 5

An engineer must compare NIST vs ISO frameworks The engineer deeded to compare as readable documentation and also to watch a comparison video review. Using Windows 10 OS. the engineer started a browser and searched for a NIST document and then opened a new tab in the same browser and searched for an ISO document for comparison

The engineer tried to watch the video, but there 'was an audio problem with OS so the engineer had to troubleshoot it At first the engineer started CMD and looked fee a driver path then locked for a corresponding registry in the registry editor The engineer enabled 'Audiosrv' in task manager and put it on auto start and the problem was solved Which two components of the OS did the engineer touch? (Choose two)

A : rmissions

B : werShell logs

C : rvice

D : R

E : ocess and thread

Answer: A,C