Higher Test Marks with Free Online 200-201 Exam Practice

Assess the CertsIQ’s updated 200-201 exam questions for free online practice of your Understanding Cisco Cybersecurity Operations Fundamentals v1.2 (CCNACBR) test. Our CCNACBR 200 201 dumps questions will enhance your chances of passing the Cisco Cybersecurity Specialist certification exam with higher marks.

Question 1

Refer to the exhibit.

An analyst was given a PCAP file, which is associated with a recent intrusion event in the company FTP server Which display filters should the analyst use to filter the FTP traffic?

Options :

A : dstport == FTP

B : tcp.port==21

C : tcpport = FTP

D : dstport = 21

Answer: C

Question 2

Which artifact is used to uniquely identify a detected file?

Options :

A : file timestamp

B : file extension

C : file size

D : file hash

Answer: D

Question 3

What is the difference between deep packet inspection and stateful inspection?

Options :

A : Stateful inspection verifies contents at Layer 4. and deep packet inspection verifies connection at Layer 7.

B : Stateful inspection is more secure than deep packet inspection on Layer 7.

C : Deep packet inspection is more secure than stateful inspection on Layer 4.

D : Deep packet inspection allows visibility on Layer 7, and stateful inspection allows visibility on Layer 4.

Answer: D

Question 4

A security analyst notices a sudden surge of incoming traffic and detects unknown packets from unknown senders After further investigation, the analyst learns that customers claim that they cannot access company servers According to NIST SP800-61, in which phase of the incident response process is the analyst?

Options :

A : post-incident activity

B : detection and analysis

C : preparation

D : containment, eradication, and recovery

Answer: D

Question 5

A security engineer notices confidential data being exfiltrated to a domain 'Ranso4134-mware31-895' address that is attributed to a known advanced persistent threat group The engineer discovers that the activity is part of a real attack and not a network misconfiguration. Which category does this event fall under as defined in the Cyber Kill Chain?

Options :

A : reconnaissance

B : delivery

C : action on objectives

D : weaponization

Answer: D