Free 200-201 Exam Braindumps
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Questions 101–105 (page: 22)

An analyst received an alert on their desktop computer showing that an attack was successful on the host. After investigating, the analyst discovered that no mitigation action occurred during the attack.
What is the reason for this discrepancy?

  1. The computer has a HIPS installed on it.
  2. The computer has a NIPS installed on it.
  3. The computer has a HIDS installed on it.
  4. The computer has a NIDS installed on it.

Answer(s): C



Refer to the exhibit.
What is the potential threat identified in this Stealthwatch dashboard?


  1. A policy violation is active for host 10.10.101.24.
  2. A host on the network is sending a DDoS attack to another inside host.
  3. There are three active data exfiltration alerts.
  4. A policy violation is active for host 10.201.3.149.

Answer(s): B



What is a difference between tampered and untampered disk images?

  1. Tampered images have the same stored and computed hash.
  2. Untampered images are deliberately altered to preserve as evidence.
  3. Tampered images are used as evidence.
  4. Untampered images are used for forensic investigations.

Answer(s): C



What is a sandbox interprocess communication service?

  1. A collection of rules within the sandbox that prevent the communication between sandboxes.
  2. A collection of network services that are activated on an interface, allowing for inter-port communication.
  3. A collection of interfaces that allow for coordination of activities among processes.
  4. A collection of host services that allow for communication between sandboxes.

Answer(s): C



An analyst is investigating a host in the network that appears to be communicating to a command and control server on the Internet. After collecting this packet capture, the analyst cannot determine the technique and payload used for the communication.


Which obfuscation technique is the attacker using?

  1. Base64 encoding
  2. transport layer security encryption
  3. SHA-256 hashing
  4. ROT13 encryption

Answer(s): B



Viewing page 22 of 70
Viewing questions 106 - 110 out of 477 questions


Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!