A security team is managing patches for a critical application that is only allowed to be updated during a monthly maintenance window. A new vulnerability is disclosed that affects this application, and the vendor has released a patch. The next maintenance window is three weeks away. What is the best course of action?

Disable the application until the patch is applied

Apply the patch immediately outside the maintenance window

Assess the risk and implement compensating controls until the maintenance window

Wait for the maintenance window without any action

A company is decommissioning an old server that contains sensitive customer data. The server will be sold to a third-party recycler. What is the most important step in the disposal stage of the asset lifecycle?

Document the server's configuration for future reference

Perform a full backup of the server data

Remove the server from the asset inventory

Securely erase or destroy the storage media

A security team manages a mixed environment: a public-facing web server (critical, but can tolerate a brief restart) and an internal legacy database server (business-critical, cannot be patched for 30 days due to vendor constraints). A vulnerability scan shows both have a critical remote-code-execution vulnerability. The team has one maintenance window this week. What is the BEST course of action?

Patch the web server now and implement a compensating control on the database server

Patch the database server now and defer the web server until next month

Patch both servers in the same maintenance window

Implement compensating controls on both servers and defer patching

A network administrator notices that a critical server's configuration has drifted from the documented standard. The administrator wants to identify what changed and restore the server to a known good state. What is the most effective approach?

Compare the current configuration to the configuration baseline and reapply the baseline settings.

Apply the latest security patches and hope the configuration returns to normal.

Reinstall the operating system and reconfigure the server from scratch.

Review the firewall logs to determine what caused the change.

Which of the following is a step in the patch management process?

Testing patches in a controlled environment before deployment

CiscoCertified CyberOps Associate

Domain 5Objective 1

5.1 Describe Management Concepts 200-201 Practice Questions (Page 7)

Part of the 5.0 Security Policies and Procedures domain, which accounts for 15% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

11concepts

15%of the exam

Questions 31–35

31expert · hard
A security team is managing patches for a critical application that is only allowed to be updated during a monthly maintenance window. A new vulnerability is disclosed that affects this application, and the vendor has released a patch. The next maintenance window is three weeks away. What is the best course of action?
Select an answer first
32application · medium
A company is decommissioning an old server that contains sensitive customer data. The server will be sold to a third-party recycler. What is the most important step in the disposal stage of the asset lifecycle?
Select an answer first
33expert · hard
A security team manages a mixed environment: a public-facing web server (critical, but can tolerate a brief restart) and an internal legacy database server (business-critical, cannot be patched for 30 days due to vendor constraints). A vulnerability scan shows both have a critical remote-code-execution vulnerability. The team has one maintenance window this week. What is the BEST course of action?
Select an answer first
34application · medium
A network administrator notices that a critical server's configuration has drifted from the documented standard. The administrator wants to identify what changed and restore the server to a known good state. What is the most effective approach?
Select an answer first
35foundation · easy
Which of the following is a step in the patch management process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

5.1 Describe Management Concepts 200-201 Practice Questions (Page 7)

Questions 31–35

A company is decommissioning an old server that contains sensitive customer data. The server will be sold to a third-party recycler. What is the most important step in the disposal stage of the asset lifecycle?

A network administrator notices that a critical server's configuration has drifted from the documented standard. The administrator wants to identify what changed and restore the server to a known good state. What is the most effective approach?

Which of the following is a step in the patch management process?

Keep studying — 5.0 Security Policies and Procedures