Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Cisco
  5. 350-201

Cisco 350-201 Exam
Performing CyberOps Using Core Security Technologies (CBRCOR) (Page 7 )

Updated On: 1-Feb-2026
Page 5 of 29
PDF with 139 Questions

An analyst is alerted for a malicious file hash. After analysis, the analyst determined that an internal workstation is communicating over port 80 with an external server and that the file hash is associated with Duqu malware. Which tactics, techniques, and procedures align with this analysis?

  1. Command and Control, Application Layer Protocol, Duqu
  2. Discovery, Remote Services: SMB/Windows Admin Shares, Duqu
  3. Lateral Movement, Remote Services: SMB/Windows Admin Shares, Duqu
  4. Discovery, System Network Configuration Discovery, Duqu

Answer(s): A



An engineer returned to work and realized that payments that were received over the weekend were sent to the wrong recipient. The engineer discovered that the SaaS tool that processes these payments was down over the weekend. Which step should the engineer take first?

  1. Utilize the SaaS tool team to gather more information on the potential breach
  2. Contact the incident response team to inform them of a potential breach
  3. Organize a meeting to discuss the services that may be affected
  4. Request that the purchasing department creates and sends the payments manually

Answer(s): A



What is a limitation of cyber security risk insurance?

  1. It does not cover the costs to restore stolen identities as a result of a cyber attack
  2. It does not cover the costs to hire forensics experts to analyze the cyber attack
  3. It does not cover the costs of damage done by third parties as a result of a cyber attack
  4. It does not cover the costs to hire a public relations company to help deal with a cyber attack

Answer(s): A


Reference:

https://tplinsurance.com/products/cyber-risk-insurance/



Refer to the exhibit. What is occurring in this packet capture?

  1. TCP port scan
  2. TCP flood
  3. DNS flood
  4. DNS tunneling

Answer(s): B



Drag and drop the cloud computing service descriptions from the left onto the cloud service categories on the right.

Select and Place:

Exhibit A:



Exhibit B:

  1. Please refer to Exhibit B for the answer.

Answer(s): A



Viewing page 7 of 29
Viewing questions 31 - 35 out of 139 questions



Post your Comments and Discuss Cisco 350-201 exam prep with other Community members:

Join the 350-201 Discussion