CiscoCertified CyberOps Associate
Domain 2Objective 7
2.7 Describe Social Engineering Attacks (manual and Generative AI) 200-201 Practice Questions (Page 2)
Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)
39questions here
8free pages
6concepts
25%of the exam
Questions 6–10
- 6
An organization wants to implement a defense-in-depth strategy against social engineering. Which combination of controls would provide the most comprehensive protection?
Select an answer first - 7
A security team is evaluating a new AI-based email security tool that claims to detect AI-generated phishing emails. The tool has a high false-positive rate. Which consideration is most important when deciding whether to deploy it?
Select an answer first - 8
An attacker calls an employee, claiming to be from the IT department, and says there is a critical security patch that requires the employee's password. The employee is hesitant, but the attacker mentions the employee's recent vacation photos from social media to build trust. Which psychological principle is the attacker primarily exploiting?
Select an answer first - 9
A company is concerned about smishing attacks targeting employees' personal phones. Which control is most effective?
Select an answer first - 10
An attacker calls an employee, pretending to be from the IT help desk, and asks for the employee's password to 'fix a problem.' Which social engineering technique is this?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.