An organization wants to proactively identify weaknesses in its network before attackers exploit them. The security team plans to run regular scans. What is the primary purpose of these vulnerability scans?

Enforce password policies across the network

Block malicious traffic automatically

Detect active intrusions in real time

Identify known vulnerabilities in systems and services

A patch management team receives a critical security update from a software vendor. The update addresses a vulnerability that is actively being exploited in the wild. According to a typical patch management process, what should the team do FIRST after acquiring the update?

Update the vulnerability management database with the patch information

Deploy the update to all production systems immediately

Test the update in a staging environment that mirrors production

Verify the update was installed successfully on a pilot group

An organization is deploying company-owned tablets to field technicians. The tablets must be configured with a specific Wi-Fi profile, email account, and a set of allowed apps. The IT team wants to automate this setup and enforce the configuration. What is the most efficient method?

Provide the technicians with a setup guide and let them configure the tablets

Enroll the tablets in MDM and apply a configuration policy

Use a configuration baseline document and ask technicians to follow it

Manually configure each tablet and then verify the settings

How are devices typically enrolled in a Mobile Device Management (MDM) system?

By changing the device's SIM card

By sending a text message to the device

By installing a profile or agent that connects the device to the MDM server

By connecting the device to a computer via USB

A security team is implementing a vulnerability management program. They have identified a critical vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. What is the most appropriate next step?

Wait for the vendor to release an update.

Implement compensating controls to mitigate the risk.

Remove the application from the network immediately.

Ignore the vulnerability because it cannot be patched.

CiscoCertified CyberOps Associate

Domain 5Objective 1

5.1 Describe Management Concepts 200-201 Practice Questions (Page 3)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

11concepts

15%of the exam

Questions 11–15

11application · medium
An organization wants to proactively identify weaknesses in its network before attackers exploit them. The security team plans to run regular scans. What is the primary purpose of these vulnerability scans?
Select an answer first
12application · medium
A patch management team receives a critical security update from a software vendor. The update addresses a vulnerability that is actively being exploited in the wild. According to a typical patch management process, what should the team do FIRST after acquiring the update?
Select an answer first
13application · medium
An organization is deploying company-owned tablets to field technicians. The tablets must be configured with a specific Wi-Fi profile, email account, and a set of allowed apps. The IT team wants to automate this setup and enforce the configuration. What is the most efficient method?
Select an answer first
14foundation · easy
How are devices typically enrolled in a Mobile Device Management (MDM) system?
Select an answer first
15application · medium
A security team is implementing a vulnerability management program. They have identified a critical vulnerability in a legacy application that cannot be patched because the vendor no longer provides updates. What is the most appropriate next step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.