Free 200-201 Exam Braindumps
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) Questions 161–165 (page: 34)

An engineer is addressing a connectivity issue between two servers where the remote server is unable to establish a successful session. Initial checks show that the remote server is not receiving an SYN-ACK while establishing a session by sending the first SYN.
What is causing this issue?

  1. incorrect TCP handshake
  2. incorrect UDP handshake
  3. incorrect OSI configuration
  4. incorrect snaplen configuration

Answer(s): A


Reference:

https://www.sciencedirect.com/topics/computer-science/three-way-handshake#:~:text=The%20TCP%20handshake,as%20shown%20in%20Figure%203.8



Refer to the exhibit.
What is shown in this PCAP file?

  1. The User-Agent is Mozilla/5.0.
  2. Timestamps are indicated with error.
  3. The HTTP GET is encoded.
  4. The protocol is TCP.

Answer(s): C


Reference:

https://launchschool.com/books/http/read/what_is_a_url



Which regular expression is needed to capture the IP address 192.168.20.232?

  1. ^(?:[0-9]{1,3}\){3}[0-9]{1,3}
  2. ^(?:[0-9]{1,3}\)*
  3. ^)?:[0-9]{1,3}\){1,4}
  4. ^([0-9].{3})

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/security/security_management/cs-mars/4-3/user/guide/local_controller/appreexp.html



An engineer received an alert affecting the degraded performance of a critical server. Analysis showed a heavy CPU and memory load.
What is the next step the engineer should take to investigate this resource usage?

  1. Run “ps -u” to find out who executed additional processes that caused a high load on a server
  2. Run “ps -ef” to understand which processes are taking a high amount of resources
  3. Run “ps -d” to decrease the priority state of high load processes to avoid resource exhaustion
  4. Run “ps -m” to capture the existing state of daemons and map required processes to find the gap

Answer(s): B


Reference:

https://unix.stackexchange.com/questions/62182/please-explain-this-output-of-ps-ef-command



Refer to the exhibit.
Which component is identifiable in this exhibit?

  1. Windows Registry hive
  2. Trusted Root Certificate store on the local machine
  3. Windows PowerShell verb
  4. local service in the Windows Services Manager

Answer(s): A


Reference:

https://docs.microsoft.com/en-us/windows/win32/sysinfo/registry-hives



Viewing page 34 of 70
Viewing questions 166 - 170 out of 477 questions


Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!