receiving an unexpected email from an unknown person with an attachment from someone in the same company
receiving an email from human resources requesting a visit to their secure website to update contact information
sending a verbal request to an administrator who knows how to change an account password
receiving an invitation to the department’s weekly WebEx meeting

Answer(s): B

Show Answer Next Question

QUESTION: 63 Exam Topic: Security Monitoring

Refer to the exhibit.
What is occurring in this network?

ARP cache poisoning
DNS cache poisoning
MAC address table overflow
MAC flooding attack

Answer(s): A

Show Answer Next Question

QUESTION: 64 Exam Topic: Security Monitoring

Which data format is the most efficient to build a baseline of traffic seen over an extended period of time?

syslog messages
full packet capture
NetFlow
firewall event logs

Answer(s): C

Show Answer Next Question

QUESTION: 65 Exam Topic: Security Monitoring

Which action prevents buffer overflow attacks?

variable randomization
using web based applications
input sanitization
using a Linux operating system

Answer(s): C

Show Answer Next Question

Download PDF Next Page

Viewing page 36 of 70
Viewing questions 176 - 180 out of 477 questions

Post your Comments and Discuss Cisco 200-201 exam prep with other Community members:

Comments:

Name:

200-201 Exam Discussions & Posts
200-201 AI Verifications

Zed on: July 10, 2025
using this to prep for my exam
UNITED STATES

None-ya on: March 06, 2025
Just here for the practice.
UNITED STATES

AEB on: January 30, 2025
The breadth of knowledge for this exam is large. It doesn't seem possible to learn everything on it for an associate level exam.
UNITED STATES

Chmod on: August 01, 2026
Exam was stressful. Prep helped though so thanks.
Canada

Deadlock on: June 27, 2026
Exam was stressful. Glad this site's prep helped.
Liechtenstein

Bitmask on: August 05, 2026
Questions here? Life saver for tough exam.
Italy

bot on: September 21, 2026
wewo im a bot
Orlando, United States

Uptime on: July 08, 2026
This exam had more stuff than I thought would pop up and was a bit of a slog. AI assistant on this site kinda got me through though pretty handy tool if you ask me.
Belgium

Sysctl on: July 21, 2026
Didn't feel confident at first but the practice questions here really helped me learn.
Latvia

Bios on: August 12, 2026
The exam was tougher than I thought but with this website's practice questions it was doable.
Netherlands

Pip on: July 14, 2026
The exam was a bit tougher than I thought it would be honestly. But the AI assistant on this site really helped out when I got stuck with concepts.
Italy

Bootload on: August 12, 2026
Took time to see progress but passed eventually.
UAE

Cgroups on: August 24, 2026
Honestly this exam was tougher than I expected but pretty comprehensive. The AI assistant on this site gave me just the right support to understand tricky topics.
Greece

Opcode on: July 22, 2026
Not gonna lie thought I was toast but those practice questions had my back.
Belgium

Forkbomb on: June 29, 2026
Relieved to be done finally.
Netherlands

Malloc on: August 04, 2026
Cranked out study at midnight before this exam and AI here helped save time and a little bit of money I passed.
Costa Rica

VlanId on: August 22, 2026
Saved me time and money with slow cramming and I passed.
Germany

Dnssec on: July 25, 2026
This exam was brutal but those practice questions really helped me pass.
UAE

Subnet on: August 06, 2026
The exam was kinda tough but I winged it with this website’s practice questions.
Greece

Pids on: August 09, 2026
Practice questions make me confident.
Norway

Pdu on: July 02, 2026
I got through this exam slow but sure with cramming questions on the site saved me time and money passed it too.
Italy

Namespaces on: September 07, 2026
Exam was more intense than I expected but the AI assistant here was a lifesaver. Totally helped me cram all the extra stuff they threw in there.
Belgium

Nathi on: September 03, 2026
very useful
Midrand, South Africa

Anycast on: August 30, 2026
The exam was tougher than I thought. The AI assistant on this site really helped a lot.
Canada

Stderr on: August 29, 2026
This exam covered way more than I thought it would but still managed with the material from this site. That AI assistant thing here helped explain stuff fast.
Greece

Endianness on: September 06, 2026
I was stressed about this cert a lot but the exam prep here eased it. Happy that's over now.
United States

ZeroDay on: August 21, 2026
That test was no joke. Good thing the prep materials worked out.
Australia

Manpage on: August 12, 2026
I did short study sessions after work and man those practice questions made finishing this cert way less stressful.
Germany

Bashrc on: August 23, 2026
The exam was tougher than I thought but the practice questions here made it doable.
Canada

Strace on: June 22, 2026
I was shaky at first but those practice questions helped a lot and boosted my confidence for this exam.
United Kingdom

Hexdump on: August 01, 2026
Saved me time and money got through the exam.
Portugal

Strace on: June 27, 2026
Took my time reviewing and passed.
Canada

Payload on: September 17, 2026
I crammed with this site and saved a ton of time and money so I just breezed through the exam chill.
Belgium

Stderr on: August 17, 2026
Exam harder but was doable.
Australia

Uptime on: September 16, 2026
This cert was tough but doable.
Germany

Mutex on: September 19, 2026
Totally saved time and money cramming for this cert with relevant questions here slowly got me through it.
Italy

Inode on: August 26, 2026
Crammed quick saved me cash passed it slow.
Japan

Payload on: July 15, 2026
I was unsure at first but the practice questions on this website really helped me learn.
Canada

Synack on: August 21, 2026
Exam was tough but these questions helped.
Taiwan

Runlevel on: September 21, 2026
Crammed with this website saved me time and money got the cert.
Malta

Parity on: September 01, 2026
Used this website for exam prep saved me a ton of time and cash by cramming relevant questions slow and steady passed it eventually.
United States

Loopback on: August 29, 2026
Was shaky at first but practice questions helped.
Mexico

Sysctl on: September 05, 2026
This exam threw me a curveball with more topics than I expected but the prep on this website helped out. The AI assistant nailed it by clarifying tricky bits which saved my skin.
Sweden

Daemon on: August 21, 2026
This cert was tough but prep questions saved me.
Singapore

Shebang on: July 22, 2026
The exam was pretty intense but using the prep from this website got me through it. Practice questions were really useful in understanding the format better.
Italy

Zsh on: September 07, 2026
Felt a bit lost at first but the practice questions here helped me learn.
Taiwan

Scsi on: July 25, 2026
The exam was a real stress bomb. Good thing the prep stuff helped me calm down and pass it.
Germany

Firmware on: September 17, 2026
The exam was harder than I thought but with the practice questions here it was still okay.
Taiwan

Sshd on: August 19, 2026
The exam stressed me out but these questions did good. I'm glad I used this website for prep.
Sweden

Cronjob on: August 26, 2026
At first I was nervous but the practice questions on this site helped me a lot.
Estonia

AI Explanation - verified by User5926 on: September 12, 2026
Question 7:
Question 7 correct answers: A and C
The question asks for two advantages of a version control system (VCS).

A: It allows for branching and merging...

Correct. Branches let developers work independently on features or fixes. Changes can later be merged into the main or feature branch after review and testing.

C: It allows multiple engineers to work against the same code and configuration files and manage differences and conflicts.

Correct. A VCS tracks everyone’s changes and helps identify and resolve conflicts when multiple people modify the same files.
Why the others are incorrect:

B: Build automation and infrastructure provisioning are handled by CI/CD and automation tools, not by version control alone.

D: User Stories and backlogs are managed by project-management tools.

E: Version control stores and tracks code, but it does not itself ensure that developers write effective unit tests.

Yaoundé, Cameroon

AI Explanation - verified by User3621 on: September 18, 2026
Question 30:
Correct answer: B. SAML
The company already uses single sign-on (SSO). When adding a new cloud-based application, it should configure a federation protocol that allows the existing identity provider to authenticate users to the new service.

SAML (Security Assertion Markup Language): Commonly used for enterprise SSO between an identity provider and cloud applications. It sends signed authentication assertions to the service provider.

RADIUS: Primarily used for centralized authentication to network devices, VPNs, and wireless networks.

EAP: An authentication framework commonly used with network access technologies; it is not typically the SSO protocol for SaaS applications.

OpenID: Related to identity authentication, but traditional enterprise SSO questions involving cloud applications generally expect SAML. OpenID Connect is a newer authentication layer built on OAuth 2.0.

Therefore, the answer key’s B is correct.
Lahore, Pakistan

AI Explanation - verified by User1494 on: September 13, 2026
Question 6:
Correct answer: B. SLA (Service-Level Agreement)
An SLA defines the expected level of service between a customer and vendor. It commonly specifies:

Required response and resolution times

Availability or uptime targets

Performance standards

Support obligations

Remedies or penalties for failing to meet the terms

Why the others are incorrect:

SOW (Statement of Work): Defines the project’s scope, tasks, deliverables, and schedule.

MOA (Memorandum of Agreement): Describes agreed responsibilities between parties, often for a specific activity.

MOU (Memorandum of Understanding): Records a mutual understanding or intention, usually less formal than a contract.

Therefore, the agreement that defines how quickly a vendor must respond is an SLA.
New Orleans, United States

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 81:
For the exam’s intended answer, choose A, C, and E:

A — Use a custom controller: An Apex class can contain the page’s logic.

C — Use a standard controller with extensions: The standard controller provides basic CRUD behavior, while an extension adds custom logic.

E — Use a standard controller: Useful when the page works mainly with one Salesforce object and needs standard functionality.

The key is treating a dashboard Visualforce page as requiring a controller-based implementation.
Important accuracy note: The answer key is questionable in general Visualforce terms. Visualforce can also use:

A page with no controller for static or controller-free content.

A custom controller with extensions; extensions are not limited only to standard controllers.

So A, B, C, D, and E can be valid Visualforce configurations generally. The stated three-answer key appears to depend on a dashboard-specific exam assumption that is not clearly expressed in the question.
Chennai, India

AI Explanation - verified by User5279 on: September 10, 2026
Question 116:
Correct answer: C — Review the communications management plan.
The communications management plan defines:

What information each stakeholder needs

When and how often it should be communicated

Which format or channel should be used

Who is responsible for communicating it

The CEO’s feedback indicates two problems: excessive frequency and irrelevant content. The project manager should first check the approved plan to understand the intended communication requirements and determine whether the plan needs updating.
Why the others are weaker:

A: The team should not decide stakeholder communications without first checking the established plan and CEO’s needs.

B: An executive summary may be appropriate, but choosing a solution before reviewing the plan is premature.

D: The stakeholder engagement plan addresses how to engage stakeholders, but this is primarily a communication planning issue.

Shah Alam, Malaysia

AI Explanation - verified by User5357 on: September 12, 2026
Question 1:
No tienen que ser idénticas en sistema operativo, pero sí deben cumplir varias compatibilidades.

Un AG puede tener réplicas en Windows y Linux desde SQL Server 2017; por tanto, una réplica Windows y otra Linux es posible.

Sin embargo, las réplicas de un AG deben utilizar normalmente la misma versión principal de SQL Server. Una instancia SQL Server 2017 no puede tener directamente una réplica secundaria SQL Server 2019 como configuración normal y permanente.

En tu escenario, SQL Server 2017 en Windows y SQL Server 2019 en Linux no se pueden añadir directamente como réplicas equivalentes de AG1. Primero habría que realizar un proceso de actualización/migración compatible, por ejemplo mediante una actualización gradual o una tecnología de migración como log shipping o distributed availability groups, según el diseño.

Además, en un AG mixto Windows/Linux hay que considerar:

Tipo de clúster y mecanismo de quorum.

Failover normalmente manual en configuraciones multiplataforma.

Edición y características compatibles.

Configuración de endpoints y permisos.

Limitaciones específicas de SQL Server en Linux.

Por eso, en la pregunta 41, “añadir una secundaria a AG1” no debe interpretarse literalmente como conectar sin más SQL 2019 Linux a un AG SQL 2017. La respuesta del banco parece simplificar demasiado el escenario; habría que validar la ruta exacta de migración.
Mollet Del Vallès, Spain

AI Explanation - verified by ajaykamath69055 on: September 22, 2026
Question 9:
Correct answer: C — Markdown-based text boxes
In a Databricks dashboard, use a text box with Markdown to add headings, labels, descriptions, and section dividers. For example:

# Development

# Testing

# Production

This lets all three sections remain on the same dashboard while clearly identifying them.
Why the others are incorrect:

Separate endpoints: relate to compute or connectivity, not dashboard labels.

Separate queries: retrieve or transform data but do not designate visual sections.

Direct text written into the dashboard in editing mode: dashboards use text boxes, typically with Markdown formatting, rather than arbitrary text placed directly on the canvas.

Chiyoda City, Japan

AI Explanation - verified by kusumasri77777 on: September 07, 2026
Question 47:
Correct answer: C — Revert to the version of the prompt that produced the closest match and adjust from that baseline.
When repeated prompt edits cause the output to drift, the problem is likely cumulative degradation: each change may introduce new ambiguity or interfere with something that previously worked.
The best approach is to:

Keep earlier prompt versions.

Identify the last version that produced acceptable output.

Restore it as a baseline.

Make small, controlled changes—ideally one significant change at a time.

Test the output after each change.

Why the others are poor choices:

A: Discards useful information about what worked.

B: Large simultaneous changes make it difficult to identify the cause of problems.

D: Accepts output that does not meet the requirements.

This tests disciplined prompt iteration and version control, rather than trial-and-error editing.
Bengaluru, India

AI Explanation - verified by ajaykamath69055 on: September 22, 2026
Question 26:
Correct answer: C — When custom logic needs to be applied at scale to array data objects.
In Databricks SQL, higher-order functions operate on complex data types such as arrays or maps. They accept another function—often a lambda expression—to apply custom logic to each element.
Common examples include:

transform() — modifies every element in an array

filter() — keeps elements matching a condition

exists() — checks whether any element matches

aggregate() — reduces array elements to one result

For example:

sql SELECT transform(scores, x -> x * 2) FROM student_scores;

This applies the custom calculation x * 2 to every value in the scores array.

A is incorrect because higher-order functions are mainly useful for nested or complex data.

B is incorrect because they do not convert logic into Python.

D is incorrect because their purpose is not to fix slow built-in functions, but to process arrays or maps with custom logic.

Chiyoda City, Japan

AI Explanation - verified by francis4fnc on: September 13, 2026
Question 73:
Question 73 is flawed as displayed. It asks for two answers, but the key lists only B.
The likely correct answers are:

B. Versioned configuration files — Infrastructure is defined in machine-readable files and tracked in version control, allowing repeatable provisioning and change history.

D. Docker files — Assuming “Doctor files” is a typo for Dockerfiles, a Dockerfile declaratively defines how to build a container image and is commonly considered infrastructure/configuration as code.

Why the others are less suitable:

A. Cloned virtual machine images — These are prebuilt infrastructure artifacts, but cloning an image is not itself a code-based infrastructure definition.

C. Change management database records — A CMDB records information about infrastructure; it does not define or provision that infrastructure.

So, the answer key is incomplete: it should likely be B and D, assuming D means Dockerfiles.
Lagos, Nigeria

AI Explanation - verified by mengwalcien on: September 26, 2026
Question 285:
Question 285 has an issue: the answer key says B (255.255.255.192, /26), but C (255.255.255.224, /27) is the best answer if the goal is three subnets with 30 hosts each.

/27 (255.255.255.224)

- 32 total addresses per subnet - 30 usable host addresses - Creates 8 subnets from the original /24 - Exactly fits the requirement of 30 hosts per subnet

/26 (255.255.255.192)

- 64 total addresses per subnet - 62 usable hosts - Creates only 4 subnets - It can technically support three subnets, but wastes address space
The other choices do not fit:

/25: Creates only 2 subnets, not 3

/28: Provides only 14 usable hosts per subnet

Best exam answer: C, /27. The stated answer B is technically capable of supporting the hosts, but it is not the most efficient or precise choice.
Quezon City, Philippines

AI Explanation - verified by User3120 on: September 09, 2026
Question 12:
The answer key shows B (technique), but I believe the correct answer is D: cycle.
In MoP (Management of Portfolios), portfolio delivery is one of the two portfolio management cycles:

Portfolio definition cycle — establishes and maintains the portfolio strategy, objectives, and management framework.

Portfolio delivery cycle — coordinates and monitors the delivery of change initiatives, ensuring the portfolio remains aligned with strategic objectives and delivers value.

Why the others are incorrect:

Practice — a structured area of portfolio management activity, such as risk management or resource management.

Technique — a method used to perform an activity; it is not the term for portfolio delivery itself.

Principle — a guiding rule for effective portfolio management.

Therefore, select D: cycle.
Oslo, Norway

AI Explanation - verified by User5253 on: September 05, 2026
Question 36:
For Question 36, the correct answer is No.
Although the explanation shown on the page lists Reader as an acceptable role, that appears inconsistent with the question’s required action. Reader is a read-only role; it cannot configure or enable Traffic Analytics, which involves changing monitoring and network-flow settings.

Owner, Contributor, and Network Contributor provide sufficient management permissions.

Reader can view Traffic Analytics data but cannot enable or configure it.

So the answer key’s B (No) is likely correct, while the accompanying explanation appears outdated or inaccurate.
Bucharest, Romania

AI Explanation - verified by User5884 on: September 09, 2026
Question 29:
Correct answer: A — Hashing
A cryptographic hash creates a fixed-length value based on the software’s contents. After the final version is completed, the company can store the known-good hash and later recalculate it:

If the hashes match, the software has likely not changed.

If they differ, the software was modified or corrupted.

Why the other options are less suitable:

Encryption: Protects confidentiality by making data unreadable; it does not primarily verify that software was unchanged.

Baselines: Establish expected configurations or states, but hashing is the specific method for checking file integrity.

Tokenization: Replaces sensitive data with non-sensitive tokens and is unrelated to software integrity.

For stronger protection against someone replacing both the software and its hash, organizations commonly use digital signatures, which provide integrity and authenticity.
Houston, United States

AI Explanation - verified by khamankopane66 on: September 14, 2026
Question 15:
Correct answers: B, C and D.
The Sales Director has increased an already unrealistic target by 40% and introduced dismissal after three consecutive months of failure. This creates pressure and dysfunctional behaviour.

B — Sales staff will tender for riskier contracts:

To achieve higher sales and margins, staff may accept contracts with greater commercial or delivery risks. They may also submit low bids or agree to demanding terms.

C — Sales staff will encroach on other territories:

Because performance is judged individually, salespeople may compete for opportunities belonging to colleagues. This can damage cooperation and create internal conflict.

D — Sales staff will look for new jobs:

Unrealistic targets combined with the threat of dismissal reduce job security and morale. Capable employees may leave rather than work under an apparently unattainable system.
A is unlikely because the policy increases anxiety rather than job satisfaction. E is also incorrect because the dismissal threat makes staff feel less secure, not more secure.
The key CIMA concept is that poorly designed targets and incentives can cause dysfunctional behaviour, rather than improved performance.
Maseru, Lesotho

AI Explanation - verified by User2042 on: September 17, 2026
Question 97:
Correct answer: D — Illumination tool
An illumination tool provides visibility into an organization’s supply chain, including third parties, dependencies, risks, and relationships. This fits a request for a full-spectrum analysis of the supply chain.
Why the others are less suitable:

Vulnerability scanner: Identifies technical weaknesses in systems, applications, or devices.

Penetration test: Simulates attacks to determine whether vulnerabilities can be exploited.

SCAP (Security Content Automation Protocol): Uses standardized formats and protocols for automated vulnerability, configuration, and compliance checks.

Illumination tool: Maps and analyzes broader supply-chain exposure and third-party risk.

The key clue is “full-spectrum” supply-chain analysis, which requires broad visibility rather than simply testing one system or checking for vulnerabilities.
Biloxi, United States

AI Explanation - verified by User7918 on: September 25, 2026
Question 7:
Correct answer: D — From Power Query, merge the Orders query and the Order Line Items query.
Why:

Orders contains order-level information, such as the order date.

Order Line Items contains the products, quantities, and line amounts associated with each order.

Merging them on the order key, such as OrderID, places the order date alongside each line item. This allows you to calculate total order value and analyze it over time.

Product attributes can remain in the Products table and be related to the resulting line-item table through ProductID.

Using Power Query performs the merge during data refresh. The resulting model requires less work when users interact with report visuals, helping minimize interaction times.
The other choices are less suitable:

Merging line items with products addresses product attributes but does not first provide the order-level date and value needed for time analysis.

DAX calculated columns or lists add unnecessary model complexity.

Calculating order counts is not the first requirement and does not combine the required order and line-item data.

Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User1028 on: September 22, 2026
Question 2:
I can’t see the hotspot image, but based on the three statements shown, the intended selections are:

Yes — Microsoft Foundry provides a secure, governed environment for building and managing generative AI applications and agents. It brings together models, data, tools, evaluation, deployment, and monitoring.

Yes — Foundry is designed for enterprise workloads and supports scaling AI applications as usage grows. Scalability comes from the underlying Azure services and managed infrastructure.

Yes — Foundry can be used in solutions involving image recognition and computer vision. Applications can use vision-capable models and Azure AI vision capabilities for tasks such as image analysis, object detection, and OCR.

The important distinction is that Foundry is the development and management platform; specific capabilities such as vision may be provided by models or integrated Azure AI services rather than by Foundry as a single standalone model.
So, for the statements provided: Yes, Yes, Yes.
Chennai, India

AI Explanation - verified by User3112 on: September 24, 2026
Question 34:
Correct answer: D — All of the choices.
An Intrusion Detection System (IDS) is commonly described using three fundamental functional components:

Information sources: Collect security-related data, such as network packets, system logs, audit records, or application events.

Analysis: Examines the collected data to identify suspicious activity, attacks, or policy violations.

Response: Takes or recommends action, such as generating alerts, logging the event, or supporting a protective response.

Therefore, Response, Information Sources, and Analysis are all core IDS functions, making “All of the choices” the best answer.
Addis Ababa, Ethiopia

AI Explanation - verified by User7981 on: September 14, 2026
Question 87:
Correct answer: Footprinting the internal network
The image isn’t visible here, so I can’t interpret every detail of the DNS snippet. However, the keyed answer fits if the log shows DNS requests for internal hostnames, subdomains, or naming patterns.
Footprinting is the reconnaissance phase in which an attacker gathers information about a target environment, such as:

Internal hostnames and subdomains

Network structure and naming conventions

Servers and services

Relationships between systems

Why the other options are less likely:

Determining ISP-assigned address space: Usually involves external registration and DNS information, not internal host discovery.

Bypassing DNS sinkholing: Would require evidence that malicious DNS requests avoided redirection.

Initial access: DNS queries alone do not show that the attacker gained access.

Exfiltrating data: DNS tunneling can do this, but the snippet would typically show encoded or unusually long DNS queries.

Thus, the suspicious DNS activity most likely represents internal network reconnaissance/footprinting.
Orlando, United States

AI Explanation - verified by User4666 on: September 17, 2026
Question 5:
Correct answer: No.
Azure virtual machines use the Infrastructure as a Service (IaaS) model, not Platform as a Service (PaaS).

IaaS: You deploy and manage virtual machines, including the operating system and installed software. Azure manages the physical datacenter, hosts, and networking infrastructure.

PaaS: Azure manages the infrastructure and operating system, while you deploy and manage your application code. Examples include Azure App Service and Azure Functions.

Therefore, recommending PaaS does not meet the requirement to deploy Azure virtual machines. The suitable model is IaaS, as stated in Question 6.
Lagos, Nigeria

AI Explanation - verified by User2290 on: September 11, 2026
Question 3:
Correct answer: No. The answer key shows B, and that is correct.

The requirement is an assessment of the Azure environment’s design, which requires a support plan offering proactive architectural guidance.

Premier support would provide this capability, but it is a high-cost option.

Since the requirement says to minimize expenses, Premier is not the best recommendation.

A lower-cost plan with the required advisory/design-review capability—historically Professional Direct in Azure’s support-plan model—would be more appropriate.

Therefore, subscribing to Premier satisfies the functionality but fails the cost-minimization requirement.
Bengaluru, India

AI Explanation - verified by User8087 on: September 09, 2026
what do you think of this answer "C. Static IP Why? The customer wants to access the surveillance system's web interface only on the local network (LAN) using its IP address. Assigning a static IP ensures the device always has the same local IP address, making it accessible on the LAN without requiring internet exposure. Port mapping exposes internal services to the internet, which would increase the risk of external log-in attempts. Subnetting organizes networks but does not specifically prevent internet access. Content filtering controls web content, not access to the surveillance system."
That answer is reasonable for the LAN-access portion, but not for the security requirement.

A static IP gives the surveillance system a predictable local address, so users can reliably reach it on the LAN.

However, a static IP does not block internet-based login attempts. If the router exposes the device through port forwarding, attackers could still reach it.

Port mapping normally exposes an internal service externally, so A is a poor choice as written.

Subnetting alone also does not block traffic; it would require routing/firewall rules.

Therefore, C is probably the closest practical choice if the question emphasizes reliable LAN access, but technically none of the four options directly prevents external logins. The correct control would be a firewall rule disabling WAN access while permitting LAN access.
Tower Hamlets, United Kingdom

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 180:
Question 180 is a quality cost classification question. The image containing the individual costs and classifications isn’t visible here, so I can’t reliably match each item or confirm whether the stated answer A is correct.
The four classifications you need are:

Prevention costs – costs incurred to stop defects occurring, such as staff training, quality planning and supplier evaluation.

Appraisal costs – costs of checking whether products meet standards, such as inspection, testing and quality audits.

Internal failure costs – costs of defects found before delivery to customers, such as scrap, rework and retesting.

External failure costs – costs of defects found after delivery, such as warranty claims, returns, complaints and product recalls.

A useful exam rule is:
Prevent ? Appraise ? Fail internally ? Fail externally
Please transcribe the descriptions shown in the image, and I can classify each one and check the answer key.
Maseru, Lesotho

AI Explanation - verified by User4912 on: September 21, 2026
Question 4:
Correct answer: C — The Order field in the Variable form
In a Service Catalog Item, the Order field on each variable determines the sequence in which the variables appear to the user.

Lower order numbers appear first.

For example, a variable with order 100 appears before one with order 200.

The Sequence field is not the control used for catalog variable display order.

The Default Value sets a value, not placement.

The Choice field defines selectable options, not the variable’s position.

Chennai, India

AI Explanation - verified by User6058 on: September 10, 2026
Question 139:
Correct answers: D and E.

D — Value analysis: Correct. It examines an existing product to identify ways of reducing its cost while still providing the required functions, quality and reliability.

E — Kaizen costing: Correct. It involves making continuous, small improvements and cost reductions while the product is already in production.

Why the others are incorrect:

Functional analysis: It is not limited to minimizing the cost of the originally defined functions. It examines what functions are required and how they can be provided at the lowest overall cost.

Value engineering: Usually applies to the design and development of a new product, rather than being a fundamental redesign of existing organisational processes. That description is closer to business process re-engineering.

Target costing: The target cost is generally established during the product development stage, before production begins. It is not continuously reset while the product is in production.

Maseru, Lesotho

AI Explanation - verified by User2881 on: September 17, 2026
Question 17:
Correct answer: C — Create three sales processes, three record types, and three page layouts.
Each team needs different Opportunity stages and fields, so configure a separate set for each business process:

Sales process: Controls which Opportunity Stage values are available.

Record type: Associates the appropriate sales process with a business scenario and controls available picklist values.

Page layout: Controls which fields are displayed and whether they are required or read-only.

For example:

Energy Market Team 1 ? Record Type 1, Sales Process 1, Page Layout 1

Energy Market Team 2 ? Record Type 2, Sales Process 2, Page Layout 2

Services/Installation Team ? Record Type 3, Sales Process 3, Page Layout 3

A single sales process would not support different stage paths, and one page layout would not provide the teams with different field arrangements.
Porto, Portugal

AI Explanation - verified by User7832 on: September 07, 2026
Question 106:
The answer key shows D, Operational, but I believe the better answer is Managerial.
An Acceptable Use Policy (AUP) is a management-approved document that defines how users may use company systems, networks, and data. It is a form of administrative/managerial control because it establishes rules and direction.

Managerial: policies, standards, risk management, governance

Operational: procedures carried out by people, such as training, incident response, and backups

Technical: firewalls, encryption, access-control systems

Physical: locks, guards, cameras

Some study materials may classify user-related activities surrounding an AUP—such as enforcing or training users on it—as operational. However, the AUP itself is a policy, so Managerial is the more precise classification.
Rose Hill, Mauritius

AI Explanation - verified by User6966 on: September 23, 2026
Question 14:
Question 14 asks which Snowflake object can limit credit consumption within an account.
The correct answer is B — Resource Monitor.
A resource monitor lets administrators:

Set credit quotas for an account or individual virtual warehouses.

Define monitoring intervals.

Trigger actions when usage reaches thresholds, such as sending notifications or suspending a warehouse.

Help control unexpected warehouse spending.

Why the other options are incorrect:

Account Usage: Provides historical usage and billing data; it does not enforce credit limits.

Warehouse Limit Parameter: Not the Snowflake object used for account-wide credit controls.

Credit Consumption Tracker: Not a standard Snowflake object.

A resource monitor can suspend assigned warehouses when limits are reached. However, account-level resource monitors and warehouse-level resource monitors have different enforcement behavior, so read the wording carefully in exam questions.
Columbus, United States

AI Explanation - verified by User2188 on: September 10, 2026
Question 492:
Correct answer: C — “Adjacency Segment must be configured manually.”
An Adjacency Segment in Segment Routing represents a specific link or adjacency from one network device to a neighbor. It is identified by an Adjacency Segment ID (Adj-SID).
Why C is wrong:

An Adj-SID does not necessarily need manual configuration.

It can often be dynamically allocated by the router, although manual configuration may also be possible.

The adjacency information is advertised through the IGP, such as IS-IS or OSPF.

The other statements are essentially correct:

It is identified by an Adj-SID.

It represents a particular adjacency of a node.

Its meaning is generally local to the advertising node; unlike a Node-SID, it is not a globally reusable instruction across the network.

Setúbal, Portugal

AI Explanation - verified by User5120 on: September 21, 2026
Question 11:
Correct answer: B — Databricks web application
In the classic Databricks architecture, the control plane hosts the Databricks management services, including the web application. Users access the workspace UI from the control plane.
The other components are associated with the data plane:

Driver node: Coordinates Spark jobs and runs in the compute environment.

Worker node: Executes tasks and processes data.

Databricks Filesystem (DBFS): Provides storage access for data used by compute resources.

Exam tip: The control plane manages and orchestrates the workspace, while the data plane performs computation and processes data.
Charlotte, United States

AI Explanation - verified by User3039 on: September 14, 2026
Question 13:
Correct answer: No
The answer key shows B, and it is correct.

Azure Cosmos DB is a globally distributed NoSQL database service. It stores and retrieves application data, but it does not provide the complete environment for building, testing, and deploying predictive analytics models.

Azure Machine Learning is the appropriate service for this requirement. It supports creating experiments, training and testing models, and deploying them for predictions.

Azure Machine Learning Studio provides the browser-based interface for these tasks.

Therefore, recommending Azure Cosmos DB does not meet the requirement.
Wan Chai, Hong Kong

AI Explanation - verified by de_jong_patri58 on: September 28, 2026
Question 93:
Question 93 is asking you to create a calculated column in Sales that assigns each transaction a category—such as Small, Medium, or Large—based on Sales[Sales Amount].
The answer key selects:

CALCULATE

AND

FILTER

The logic is essentially:

DAX Transaction Category = CALCULATE( MAX('Transaction Size'[Size]), FILTER( 'Transaction Size', AND( Sales[Sales Amount] >= 'Transaction Size'[Minimum], Sales[Sales Amount] <= 'Transaction Size'[Maximum] ) ) )

FILTER examines the rows in the Transaction Size table.

AND ensures the sales amount falls between the category’s minimum and maximum values.

CALCULATE evaluates the result in the modified filter context and returns the matching category.

For example, if the amount is 750 and the medium range is 500–999, the calculated column returns Medium.
The exact column names may differ because the table images are unavailable, but the important pattern is: filter the range table using two conditions, then return the ma
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User6688 on: September 23, 2026
Question 43:
Correct answer: D — To ensure non-repudiation
S/MIME digital signatures use the sender’s private key to sign an email. The recipient can verify the signature with the sender’s public key, helping prove:

The message came from the claimed sender (authentication)

The message was not altered (integrity)

The sender cannot easily deny sending it (non-repudiation)

Why not C — To block phishing attacks?
A digital signature does not block phishing. It may help a recipient identify whether an email is genuinely signed by a trusted sender, but:

Attackers can send unsigned phishing emails.

Attackers may compromise a legitimate account and send signed malicious emails.

Users may still be tricked by a validly signed message.

S/MIME encryption protects confidentiality, while S/MIME signing primarily provides authentication, integrity, and non-repudiation. In this question, non-repudiation is the best and most specific answer.
Vacoas, Mauritius

AI Explanation - verified by fuat on: September 21, 2026
Question 79:
Correct answers: C — Constrained VMs and D — Overprovisioned VMs
These views help identify VMs that are using resources inefficiently:

Constrained VMs: VMs whose workloads are experiencing resource pressure, such as insufficient CPU or memory. They may need additional resources or optimization.

Overprovisioned VMs: VMs allocated more CPU, memory, or storage than their workloads require. Their resources may be reclaimed or reduced.

Why not the others:

Underprovisioned VMs: This is not the predefined view identified for this report question.

Zombie VMs: These are typically inactive or unused VMs and are useful for cleanup, but they are not the two views specifically intended here to identify inefficient resource allocation.

The exam distinction is that constrained VMs need more suitable resources, while overprovisioned VMs have excess resources.
Stockholm, Sweden

AI Explanation - verified by User8622 on: September 23, 2026
Question 8:
Correct answers: B. Deterrent and F. Detective

Deterrent control: The signs warning that people may be filmed can discourage unauthorized or malicious activity. They do not directly stop the action; they influence behavior.

Detective control: CCTV records or monitors activity so security personnel can identify events or investigate them afterward.

Why the others do not fit:

Preventive: Stops an incident from occurring, such as access control.

Corrective: Restores systems after an incident.

Directive: Instructs people to behave in a certain way, such as a security policy.

Compensating: An alternative control used when the preferred control is not feasible.

The answer key’s B and F is correct.
Atlanta, United States

AI Explanation - verified by User3350 on: September 20, 2026
Question 18:
Correct answer: C — try to expand its customer base to avoid becoming dependent on the corporation.
The passage warns that a minority-owned business may become dependent on one large corporate customer. If that customer reduces its orders or ends the relationship, the small business could suffer serious financial problems. The business might also become complacent and stop seeking other opportunities.
Therefore, it should develop relationships with additional customers, even though it may have to compete with larger, established companies.
Why the other choices are wrong:

A: Not expanding would increase its dependence.

B: More business from the same corporation would make dependence worse.

D: Passing work to other minority businesses does not solve its own dependence.

E: The passage does not suggest that it can force or influence the corporation to give work to others.

Lagos, Nigeria

AI Explanation - verified by User4114 on: September 12, 2026
A highly regulated financial institution wants to use Gemini as the core decision engine for a loan approval system that will deterministically approve or reject loan applications based on a strict set of predefined criteri Why is this an inappropriate use case for Gemini? Gemini cannot integrate with required financial databases. Gemini is not equipped to handle structured numerical data for financial assessments. Gemini is designed for flexible content generation and inference, not rigid rule-based decisions. Gemini deployment for this scenario would be too expensive and complex.
Correct answer: Gemini is designed for flexible content generation and inference, not rigid rule-based decisions.
Gemini can analyze financial information, summarize applications, or assist loan officers. However, it is probabilistic and may produce variable outputs, so it should not be the authoritative engine for decisions requiring:

Deterministic approve/reject results

Strict adherence to predefined rules

Consistent, reproducible outcomes

Auditability and regulatory compliance

A traditional rules engine or explicitly programmed decision system is more appropriate for the final loan decision. Gemini could assist around that system—for example, extracting information from documents—but should not replace the deterministic approval logic.
Central, Hong Kong

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 152:
Correct answer: A — Efficient
The three Es in not-for-profit performance measurement are:

Economy: Obtaining inputs at the lowest appropriate cost.

Efficiency: Making the best use of resources, such as staff, money, and equipment.

Effectiveness: Achieving the intended objectives or outcomes.

“Optimum utilization of available resources” describes efficiency, so the organization is efficient.
For example, a charity is efficient if it delivers its services using the minimum resources necessary, but it is effective only if those services achieve the intended social results.
Maseru, Lesotho

AI Explanation - verified by gamer1018 on: September 08, 2026
Question 4:
Correct answer: D. Shadow IT
Shadow IT is the use of hardware, software, cloud services, or network connections without the organization’s approval or security oversight.
Here, the R&D department is bypassing the company VPN when accessing company-related systems. That creates an unmanaged path around security controls and may indicate employees are using unauthorized services or configurations.
Why the others are incorrect:

Espionage: Stealing information for intelligence or competitive purposes.

Data exfiltration: Unauthorized removal or transfer of data.

Nation-state attack: An attack sponsored or conducted by a government.

Shadow IT: Unapproved technology or methods used to access organizational resources.

Broomfield, United States

AI Explanation - verified by User5398 on: September 03, 2026
Question 18:
For Question 18, select the Teams DLP location corresponding to where the document is shared:

Sensitive document shared during a Teams chat: Teams chat

Sensitive document stored/shared in a Teams channel: Teams channel messages

Why:

Files shared in a chat are generally stored in the sender’s OneDrive, but the relevant DLP context is the Teams chat message and its attachment.

Files shared in a channel are stored in the team’s SharePoint site, but the relevant context is the Teams channel message.

The DLP rule can then use an action such as restrict access to the content to prevent guest users from opening the sensitive document.

The underlying storage location—OneDrive or SharePoint—is not the best distinction for this question; the requirement is specifically about preventing access based on the Teams sharing context.
Bangor, United Kingdom

AI Explanation - verified by User1823 on: September 23, 2026
so the answer is NNY
Yes — NNY is correct if User1’s department is Engineer, not Engineering.

Box 1: No — The rule requires user.department to equal Engineering. Engineer does not match, so User1 is not in AU1. Admin1 cannot reset User1’s password.

Box 2: No — Admin1’s role is scoped to AU1 and cannot manage users outside that AU.

Box 3: Yes — Admin2 is a Global Administrator and can reset User3’s password.

The issue is not capitalization. Engineering and Engineer are different department values.
Singapore, Singapore

AI Explanation - verified by pikej74485 on: September 21, 2026
Question 196:
Correct answer: D — <apex:stylesheet>
Use <apex:stylesheet> in a Visualforce page to reference an external CSS file:

xml <apex:page> <apex:stylesheet value="{!URLFOR($Resource.MyStyles, 'styles/main.css')}" /> </apex:page>

This is commonly used with a static resource, which is the recommended way to package CSS for Salesforce deployments.

<apex:includeScript> is for JavaScript.

<apex:includeStyle> is not a valid Visualforce component.

<apex:require> is not the Visualforce tag used to load CSS.

The value attribute specifies the CSS file’s URL.
Chennai, India

AI Explanation - verified by Tholang2016 on: September 11, 2026
Question 196:
Question 196 tests the principles of throughput accounting, which focuses on maximising cash generation through the organisation’s main constraint or bottleneck.
The correct statements are A, C and D:

A — If there is no demand, there should be no production.

Throughput accounting discourages producing for inventory. Production should be driven by actual customer demand.

B — Not all sales equal profit.

This statement is generally treated as false in this question. Throughput accounting defines throughput as sales revenue less direct material costs. Sales generate throughput, which contributes towards profit after operating expenses.

C — Stocking up on inventory is bad for business.

Inventory ties up cash and may incur storage, insurance and obsolescence costs. Throughput accounting aims to keep inventory as low as possible.

D — All costs, except materials, are considered fixed.

In the short term, throughput accounting treats operating expenses—including labour and overheads—as fixed. The main variable cost is usually direct materials.

E — Departments should operate at full capacity regardless of bottlenecks.

This is false. Producing more than the bottleneck can handle creates unnecessary inventory. Resources should be coordinated around the constraint.
Maseru, Lesotho

AI Explanation - verified by User1890 on: September 27, 2026
Question 28:
Question 28 is testing the difference between a semantic model (dataset) and a report.

Dataset file: Use Import mode. Excel files are imported into Power BI, and the two Sales tables can be combined with Power Query.

Report file: Use a live connection to the published dataset. This keeps the report separate from the dataset and avoids importing the data again.

Therefore, the intended mapping in answer A is likely:

Report file: DirectQuery/live connection

Dataset file: Import

The important concept is that the dataset owns the imported data and transformations, while the separate report connects to that published dataset. This allows the dataset and report to be published and managed independently. Note that the image containing the exact drag-and-drop labels is unavailable, so the precise displayed mode name for the report may be live connection rather than DirectQuery.
Hendrik-Ido-Ambacht, The Netherlands

AI Explanation - verified by User2814 on: September 19, 2026
Question 171:
Correct answers: Stream and External table
A schema is a logical container inside a database for database objects. In Snowflake, schemas can contain objects such as:

Streams — track change data for tables or views.

External tables — reference data stored in an external cloud storage location.

The other options are not schema-contained objects:

Role — account-level security object.

Warehouse — account-level compute resource.

User — account-level security object.

Share — account-level object used to share data.

So the answer key’s B and D is correct.
Bengaluru, India

AI Explanation - verified by User3287 on: September 25, 2026
Question 1:
Correct answer: A — Configure SetupComplete.cmd in %windir%\Setup\Scripts.
SetupComplete.cmd runs automatically after Windows Setup completes and before the first user signs in. It is useful for applying final configuration to a newly deployed or generalized VM, such as:

Installing software

Applying configuration changes

Calling PowerShell scripts

Running setup or customization commands

The batch file can invoke a PowerShell script, for example:

cmd powershell.exe -ExecutionPolicy Bypass -File C:\Scripts\ConfigureVM.ps1

Why the other options are less suitable:

GPO logon script: Runs only when a user logs on and depends on domain/GPO processing.

GPO startup script: Runs during startup, but requires the VM to be domain joined and receives the applicable GPO.

Place scripts in a VHD: Merely makes the scripts available; it does not automatically execute them.

The explanation shown on the page discusses Azure’s Custom Script Extension, but that does not match the listed on-premises Hyper-V scenario. For the options provided, A is the best answer.
New Delhi, India

AI Explanation - verified by User7412 on: September 14, 2026
Question 42:
Correct answer: B — Metadata
Image files can contain metadata, such as:

GPS coordinates

Date and time the image was taken

Camera or device information

Image dimensions and software used

Geolocation coordinates are commonly stored in the image’s EXIF metadata. An analyst can inspect this information during a forensic investigation.
Why the others are incorrect:

Log data: Records generated by systems or applications, not normally embedded in image files.

Encrypted data: Information intentionally encoded to prevent unauthorized access.

Sensitive data: A broad classification, not the specific type of information being extracted.

Biloxi, United States

AI Explanation - verified by User2959 on: September 17, 2026
Question 1:
With the identities you provided, User1 only is the correct answer.

User1 (user1@contoso.com) — This is an external guest in the Fabrikam tenant. Assuming the guest uses email one-time passcode authentication, Azure AD emails a passcode to user1@contoso.com.

User2 (user2@outlook.com) — An Outlook.com address can authenticate with a Microsoft account, so Azure AD uses that account’s authentication rather than sending an email OTP. The fact that User2 has never accessed Fabrikam resources does not by itself trigger OTP.

User3 (user3@fabrikam.com) — This is an internal Fabrikam user, so the user signs in with the organization’s normal credentials and does not receive a guest OTP.

Therefore, the answer key’s User1 only is consistent with these identities. The important distinction is that guest status alone is not enough—OTP is used when the external user does not have another supported sign-in identity.
Amsterdam, The Netherlands

AI Explanation - verified by User9732 on: September 15, 2026
Question 7:
Correct answer: B. Automated response actions
A next-generation SIEM does more than collect and correlate logs. It can use analytics, threat intelligence, and automation to identify threats and trigger response actions—often through integration with SOAR capabilities.
Why the others are incorrect:

Virus signatures: Primarily associated with antivirus or antimalware tools.

Security agent deployment: Usually handled by endpoint-management or endpoint-security platforms.

Vulnerability scanning: Performed by vulnerability-assessment tools, although a SIEM may ingest their results.

The key distinction is that next-generation SIEM systems can help detect, investigate, and automatically respond to security incidents.
New Orleans, United States

Hay Dear!

Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures.
You can access the rest of the 200-201 content, but please register or login to continue.

Login Or Register

AI Tutor 👋 I’m here to help!

AI Tutor — 200-201

Hello,
I’m your AI study assistant for the 200-201 exam. Ask me anything about the exam or the questions on this page, and I’ll break it down so it actually makes sense.
You want it in a different language? Just say it.

Contact Us

Exam Vendors

Hay AI, Learn About Us

Customer Reviews

DMCA

Terms of Service

Privacy Policy

© 2026 Free-Braindumps.com - A Community of Learners.
Free-Braindumps.com is owned by Xùnliàn Limited, a company registered at 15 Wang Chiu Rd, Kowloon Bay, Hong Kong.

The resources, practice tests, and study guides on Free-Braindumps.com are strictly for educational and research purposes. We are an independent community platform and are not affiliated with, endorsed by, or sponsored by any official certification vendors, including Microsoft, Cisco, Amazon, CompTIA, or others. All certification names, trademarks, and logos are the property of their respective owners. Our content is user-contributed or independently developed to assist with exam preparation and skill assessment; we do not host or provide access to proprietary, confidential, or live exam questions.

Cisco 200-201 Exam Prep Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) (Page 36 )

QUESTION: 61 Exam Topic: Security Monitoring

QUESTION: 62 Exam Topic: Security Monitoring

QUESTION: 63 Exam Topic: Security Monitoring

QUESTION: 64 Exam Topic: Security Monitoring

QUESTION: 65 Exam Topic: Security Monitoring

Cisco 200-201 Exam Prep
Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) (Page 36 )