In the shared responsibility model for cloud computing, who is responsible for securing the physical data center infrastructure?

Both customer and provider equally

Which of the following is a security control used to isolate containers at runtime?

Disabling the container runtime's security features

Running containers as root to ensure they have full access

Using Linux namespaces and cgroups to isolate container processes

Allowing containers to share the host network stack

Where is an intrusion prevention system (IPS) typically placed in a network to effectively block malicious traffic before it reaches internal hosts?

Inline at the network perimeter

How does legacy antivirus software primarily detect malware?

By using machine learning to identify new threats

By comparing file signatures against a database of known malware signatures

By monitoring network traffic for malicious patterns

By analyzing the behavior of programs in a sandbox

A company is deploying a web application in a public cloud IaaS environment. The security team needs to control which source IP addresses can access the application's load balancer over the internet. Which cloud security control should be configured?

A web application firewall (WAF) rule

A network security group (NSG) or security group rule on the load balancer's subnet

A data encryption policy for the application database

An identity and access management (IAM) policy

CiscoCertified CyberOps Associate

Domain 1Objective 2

1.2 Compare Security Deployments 200-201 Practice Questions (Page 1)

Part of the 1.0 Security Concepts domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

20%of the exam

Questions 1–5

1foundation · easy
In the shared responsibility model for cloud computing, who is responsible for securing the physical data center infrastructure?
Select an answer first
2foundation · easy
Which of the following is a security control used to isolate containers at runtime?
Select an answer first
3foundation · easy
Where is an intrusion prevention system (IPS) typically placed in a network to effectively block malicious traffic before it reaches internal hosts?
Select an answer first
4foundation · easy
How does legacy antivirus software primarily detect malware?
Select an answer first
5application · medium
A company is deploying a web application in a public cloud IaaS environment. The security team needs to control which source IP addresses can access the application's load balancer over the internet. Which cloud security control should be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.