A security analyst notices that a web server's configuration has drifted from the approved settings, and the change was not authorized. The organization uses configuration management tools. What should the analyst consult to determine the exact approved settings for that server?

The configuration baseline for the server

The patch management log for the server

The asset inventory record for the server

The vulnerability scan report for the server

A security analyst discovers that a critical application server is missing a security patch that addresses a known vulnerability. The analyst wants to apply the patch but is concerned about disrupting business operations. What is the best course of action?

Wait for the next scheduled maintenance window without testing.

Apply the patch only to the affected server and skip testing.

Test the patch in a staging environment before deploying to production.

Apply the patch immediately to all servers to reduce risk.

CiscoCertified CyberOps Associate

Domain 5Objective 1

5.1 Describe Management Concepts 200-201 Practice Questions (Page 12)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

11concepts

15%of the exam

Questions 56–57

56application · medium
A security analyst notices that a web server's configuration has drifted from the approved settings, and the change was not authorized. The organization uses configuration management tools. What should the analyst consult to determine the exact approved settings for that server?
Select an answer first
57application · medium
A security analyst discovers that a critical application server is missing a security patch that addresses a known vulnerability. The analyst wants to apply the patch but is concerned about disrupting business operations. What is the best course of action?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

5.1 Describe Management Concepts 200-201 Practice Questions (Page 12)

Questions 56–57

A security analyst notices that a web server's configuration has drifted from the approved settings, and the change was not authorized. The organization uses configuration management tools. What should the analyst consult to determine the exact approved settings for that server?

A security analyst discovers that a critical application server is missing a security patch that addresses a known vulnerability. The analyst wants to apply the patch but is concerned about disrupting business operations. What is the best course of action?

Keep studying — 5.0 Security Policies and Procedures