Which security measure is specifically designed to filter and monitor HTTP traffic between a web application and the internet to block common web attacks?

Intrusion detection system (IDS)

A security administrator is comparing antimalware solutions to replace legacy antivirus. The administrator wants a solution that can detect a new malware strain that encrypts files and attempts to delete shadow copies, even though no signature exists. Which detection technique is most likely to identify this behavior?

Behavioral analysis that monitors for mass file encryption and shadow copy deletion

Static file analysis that compares the file hash to a known-good database

Network-based detection that looks for command-and-control traffic

Signature-based detection using the latest virus definitions

Which cloud security control is used to control access to cloud resources based on user identity and permissions?

Identity and Access Management (IAM)

A SOC team handles thousands of low-severity alerts daily. The team wants to reduce manual effort by automatically enriching alerts with threat intelligence and performing routine containment actions, such as blocking an IP address on the firewall, without analyst intervention. Which technology should the team implement?

A network-based intrusion prevention system (IPS)

A log management solution with search capabilities

A Security Orchestration, Automation, and Response (SOAR) platform

A Security Information and Event Management (SIEM) system

A company uses a public cloud IaaS environment with multiple virtual machines. The security team wants to control inbound and outbound traffic at the network layer and also enforce least-privilege access for administrators. Which combination of cloud security controls should be implemented?

Web application firewall (WAF) and DDoS protection

Security groups and IAM policies

Encryption at rest and in transit

CiscoCertified CyberOps Associate

Domain 1Objective 2

1.2 Compare Security Deployments 200-201 Practice Questions (Page 4)

Part of the 1.0 Security Concepts domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

20%of the exam

Questions 16–20

16foundation · easy
Which security measure is specifically designed to filter and monitor HTTP traffic between a web application and the internet to block common web attacks?
Select an answer first
17application · medium
A security administrator is comparing antimalware solutions to replace legacy antivirus. The administrator wants a solution that can detect a new malware strain that encrypts files and attempts to delete shadow copies, even though no signature exists. Which detection technique is most likely to identify this behavior?
Select an answer first
18foundation · easy
Which cloud security control is used to control access to cloud resources based on user identity and permissions?
Select an answer first
19application · medium
A SOC team handles thousands of low-severity alerts daily. The team wants to reduce manual effort by automatically enriching alerts with threat intelligence and performing routine containment actions, such as blocking an IP address on the firewall, without analyst intervention. Which technology should the team implement?
Select an answer first
20application · medium
A company uses a public cloud IaaS environment with multiple virtual machines. The security team wants to control inbound and outbound traffic at the network layer and also enforce least-privilege access for administrators. Which combination of cloud security controls should be implemented?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

1.2 Compare Security Deployments 200-201 Practice Questions (Page 4)

Questions 16–20

Which security measure is specifically designed to filter and monitor HTTP traffic between a web application and the internet to block common web attacks?

Which cloud security control is used to control access to cloud resources based on user identity and permissions?

A company uses a public cloud IaaS environment with multiple virtual machines. The security team wants to control inbound and outbound traffic at the network layer and also enforce least-privilege access for administrators. Which combination of cloud security controls should be implemented?

Keep studying — 1.0 Security Concepts