A company runs a legacy application that requires an outdated version of a database service. The outdated service has known vulnerabilities, but the application cannot be upgraded. Which strategy best reduces the attack surface?

Apply a third-party patch that is not officially supported.

Allow all internal users to access the database service for troubleshooting.

Disable the database service and hope the application does not need it.

Place the database service on a separate VLAN and restrict access to only the application servers that need it.

A vulnerability scanner reports a critical flaw in a database server. The database is used by a legacy application that is no longer supported by the vendor, and a patch is not available. Which action is the most appropriate next step?

Run the vulnerability scanner again to confirm the finding before taking any action.

Implement compensating controls, such as network segmentation and strict access rules, to reduce exploitability.

Immediately decommission the database server to eliminate the vulnerability.

Ignore the vulnerability because the application is legacy and the risk is accepted.

A small company runs a public web server that also hosts an internal file share on the same OS. The administrator wants to reduce the attack surface without changing the server's role. Which action best achieves this?

Disable the file share service and move the share to a separate internal server.

Add a firewall rule that restricts file share access to internal IP addresses.

Enable logging on the file share to detect unauthorized access attempts.

Apply the latest OS patches and keep the file share enabled.

Which action is most effective in reducing the attack surface of a server?

Conducting regular security awareness training for employees

Disabling unnecessary services and closing unused ports

Increasing the password complexity for all user accounts

Implementing a security information and event management (SIEM) system

An analyst is asked to describe the attack surface of a web application. Which description is most accurate?

The list of known Common Vulnerabilities and Exposures (CVE) entries that apply to the application

The number of lines of code in the application that have not been reviewed

The set of all possible ways an attacker could interact with the application, including network services, user inputs, and APIs

The security controls, such as firewalls and intrusion prevention systems, that protect the application

CiscoCertified CyberOps Associate

Domain 2Objective 1

2.1 Compare Attack Surface and Vulnerability 200-201 Practice Questions (Page 1)

Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

6concepts

25%of the exam

Questions 1–5

1application · medium
A company runs a legacy application that requires an outdated version of a database service. The outdated service has known vulnerabilities, but the application cannot be upgraded. Which strategy best reduces the attack surface?
Select an answer first
2application · medium
A vulnerability scanner reports a critical flaw in a database server. The database is used by a legacy application that is no longer supported by the vendor, and a patch is not available. Which action is the most appropriate next step?
Select an answer first
3application · medium
A small company runs a public web server that also hosts an internal file share on the same OS. The administrator wants to reduce the attack surface without changing the server's role. Which action best achieves this?
Select an answer first
4foundation · easy
Which action is most effective in reducing the attack surface of a server?
Select an answer first
5foundation · easy
An analyst is asked to describe the attack surface of a web application. Which description is most accurate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.