Free Cisco 200-201 Exam Questions

Become Cisco Certified with updated 200-201 exam questions and correct answers

Page: 1 / 82

Total 406 Questions | Updated On: Mar 28, 2025

Add To Cart

Question 1

Which incidence response step includes identifying all hosts affected by an attack?

A : tection and analysis

B : t-incident activity

C : eparation

D : ntainment, eradication, and recovery

Answer: D

Question 2

An engineer is investigating a case of the unauthorized usage of the ''Tcpdump'' tool. The analysis revealed that a malicious insider attempted to sniff traffic on a specific interface. What type of information did the malicious insider attempt to obtain?

A : gged protocols being used on the network

B : l firewall alerts and resulting mitigations

C : gged ports being used on the network

D : l information and data within the datagram

Answer: C

Question 3

Which utility blocks a host portscan?

A : DS

B : ndboxing

C : t-based firewall

D : timalware

Answer: C

Question 4

Refer to the exhibit.

What is the potential threat identified in this Stealthwatch dashboard?

A : A policy violation is active for host 10.10.101.24.

B : A host on the network is sending a DDoS attack to another inside host.

C : There are two active data exfiltration alerts.

D : A policy violation is active for host 10.201.3.149.

Answer: C

Question 5

Refer to the exhibit.

An analyst was given a PCAP file, which is associated with a recent intrusion event in the company FTP server Which display filters should the analyst use to filter the FTP traffic?

A : dstport == FTP

B : tcp.port==21

C : tcpport = FTP

D : dstport = 21

Answer: C

Page: 1 / 82

Total 406 Questions | Updated On: Mar 28, 2025

Add To Cart