A network security system that inspects traffic at the network layer and makes allow/deny decisions based on a defined rule set is best described as which of the following?

Intrusion detection system (IDS)

Virtual private network (VPN) concentrator

A company runs multiple virtual machines (VMs) on a single hypervisor. The security team is concerned about a compromised VM being used to attack other VMs on the same host. Which control is most effective at mitigating this risk?

Install a host-based firewall on the hypervisor

Deploy a network-based IPS on the physical network

Segment VM traffic with virtual network security controls and micro-segmentation

Which control is commonly used to secure virtual machines in a virtualized environment?

Using the same credentials for all VMs

Removing all network connectivity from VMs

Which of the following is a typical capability of agent-based endpoint security?

Monitoring network traffic at the perimeter

Encrypting all data in the cloud

Blocking malicious processes in real time based on behavior

Filtering HTTP traffic for web applications

What is a key security consideration for containerized environments?

Disabling all logging to reduce overhead

Ensuring containers have unrestricted access to the host kernel

Using the same image for all containers to simplify management

Scanning container images for vulnerabilities before deployment

CiscoCertified CyberOps Associate

Domain 1Objective 2

1.2 Compare Security Deployments 200-201 Practice Questions (Page 6)

Part of the 1.0 Security Concepts domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 58 practice questions to prepare you well beyond it. (estimate)

58questions here

12free pages

14concepts

20%of the exam

Questions 26–30

26foundation · easy
A network security system that inspects traffic at the network layer and makes allow/deny decisions based on a defined rule set is best described as which of the following?
Select an answer first
27application · medium
A company runs multiple virtual machines (VMs) on a single hypervisor. The security team is concerned about a compromised VM being used to attack other VMs on the same host. Which control is most effective at mitigating this risk?
Select an answer first
28foundation · easy
Which control is commonly used to secure virtual machines in a virtualized environment?
Select an answer first
29foundation · easy
Which of the following is a typical capability of agent-based endpoint security?
Select an answer first
30foundation · easy
What is a key security consideration for containerized environments?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.