An organization is planning to replace a fleet of aging laptops. The current laptops are still functional but are no longer receiving security updates from the vendor. The replacement project will take six months. What is the BEST approach to manage the risk during the transition?

Remove the aging laptops from the asset inventory

Isolate the aging laptops from the network and restrict their access

Continue using the laptops and apply available third-party patches

Accelerate the replacement project and prioritize the highest-risk users

A vulnerability assessment reveals a high-risk flaw in a web server. The IT team cannot apply the vendor patch immediately because it requires a maintenance window. What is the best immediate action to reduce risk?

Apply a temporary workaround or compensating control

Disable the web server until the patch is ready

Wait for the maintenance window without any action

Increase the logging level on the server

A security analyst is reviewing the patch management process and notices that some systems are not receiving updates because they were not included in the initial inventory. What is the most likely cause of this gap?

Insufficient patch severity assessment

An organization is deploying MDM to manage company-issued tablets. The security team wants to ensure that only authorized devices can access corporate resources and that each device receives the required security policies. What should be configured first?

Device enrollment with authentication

A patch management team is preparing to deploy a monthly security update. The update fixes a critical vulnerability in a widely used application, but testing reveals that it causes a minor performance issue on a small number of legacy workstations. The vulnerability is not currently being exploited. What is the BEST decision?

Cancel the update deployment entirely

Deploy the update to all systems and accept the performance issue

Deploy the update only to the legacy workstations that have the performance issue

Defer the update on the affected legacy workstations and deploy it to the rest of the environment

CiscoCertified CyberOps Associate

Domain 5Objective 1

5.1 Describe Management Concepts 200-201 Practice Questions (Page 1)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

11concepts

15%of the exam

Questions 1–5

1expert · hard
An organization is planning to replace a fleet of aging laptops. The current laptops are still functional but are no longer receiving security updates from the vendor. The replacement project will take six months. What is the BEST approach to manage the risk during the transition?
Select an answer first
2application · medium
A vulnerability assessment reveals a high-risk flaw in a web server. The IT team cannot apply the vendor patch immediately because it requires a maintenance window. What is the best immediate action to reduce risk?
Select an answer first
3application · medium
A security analyst is reviewing the patch management process and notices that some systems are not receiving updates because they were not included in the initial inventory. What is the most likely cause of this gap?
Select an answer first
4application · medium
An organization is deploying MDM to manage company-issued tablets. The security team wants to ensure that only authorized devices can access corporate resources and that each device receives the required security policies. What should be configured first?
Select an answer first
5expert · hard
A patch management team is preparing to deploy a monthly security update. The update fixes a critical vulnerability in a widely used application, but testing reveals that it causes a minor performance issue on a small number of legacy workstations. The vulnerability is not currently being exploited. What is the BEST decision?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.