A vulnerability scan reveals that a database server is running an outdated version of its operating system with a known privilege-escalation vulnerability. The database team cannot schedule a maintenance window for two weeks. What is the most appropriate immediate mitigation?

Apply the OS patch immediately during business hours

Ignore the vulnerability until the maintenance window

Implement a compensating control, such as restricting network access to the server

Shut down the database server until the patch can be applied

Which of the following best describes what asset management involves?

Monitoring network traffic to detect unauthorized access attempts

Developing security policies that govern employee behavior

Creating a detailed list of all hardware, software, and data assets and keeping that list current

Installing antivirus software on all endpoints

A vulnerability scan identifies a medium-risk issue in a database server. The team has limited resources and must prioritize remediation efforts. What should they do first?

Assess the actual risk in the context of the environment

Disable the database server until the issue is resolved

Apply a patch immediately without further analysis

Ignore the vulnerability because it is medium risk

A company is deploying MDM for a mix of corporate-owned and personally-owned devices (BYOD). The security team wants to protect corporate data while respecting employee privacy. What is the best approach?

Enroll only corporate-owned devices

Apply the same policies to all devices regardless of ownership

Require full-device remote wipe capability

Use containerization to separate corporate and personal data

What is the role of vulnerability scanning tools in the vulnerability management process?

To automatically patch all identified vulnerabilities

To block malicious network traffic

To identify weaknesses in systems and applications

CiscoCertified CyberOps Associate

Domain 5Objective 1

5.1 Describe Management Concepts 200-201 Practice Questions (Page 5)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

11concepts

15%of the exam

Questions 21–25

21application · medium
A vulnerability scan reveals that a database server is running an outdated version of its operating system with a known privilege-escalation vulnerability. The database team cannot schedule a maintenance window for two weeks. What is the most appropriate immediate mitigation?
Select an answer first
22foundation · easy
Which of the following best describes what asset management involves?
Select an answer first
23application · medium
A vulnerability scan identifies a medium-risk issue in a database server. The team has limited resources and must prioritize remediation efforts. What should they do first?
Select an answer first
24expert · hard
A company is deploying MDM for a mix of corporate-owned and personally-owned devices (BYOD). The security team wants to protect corporate data while respecting employee privacy. What is the best approach?
Select an answer first
25foundation · easy
What is the role of vulnerability scanning tools in the vulnerability management process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.