A security architect must choose between two designs for a remote-access VPN: one uses a strong encryption algorithm that adds 300 ms latency, and the other uses a lighter algorithm with 50 ms latency but weaker confidentiality. The business requires real-time video conferencing. What is the most appropriate decision?

Deploy the strong encryption and accept the latency, because confidentiality is always the top priority

Deploy both algorithms and let users choose per session

Reject the VPN requirement because no solution can meet both needs

Deploy the lighter algorithm, because availability and usability outweigh confidentiality in this scenario

A company's online banking system experiences periodic outages during peak hours. The security team proposes adding more servers, but management is concerned about cost. Which approach would BEST balance availability and cost?

Use a single powerful server instead of multiple servers

Purchase a large number of servers and keep them running at all times

Add a load balancer and use auto-scaling to add servers only during peak demand

Reduce the number of servers to save money and accept the outages

A company's email server crashes every time a large marketing campaign is sent, causing employees to lose access to email for hours. Which measure would BEST improve availability?

Implementing a load balancer across multiple email servers

Increasing the spam filter's sensitivity

Adding digital signatures to outgoing emails

Encrypting all email messages in transit

A hospital's patient portal allows doctors to view lab results. The compliance team requires that only the treating physician can see a patient's HIV status. Which control directly enforces this requirement?

Adding a checksum to each lab result record

Encrypting the database at rest with AES-256

Implementing role-based access control (RBAC) on the portal

Deploying a load balancer in front of the portal

A company's remote employees use a VPN to access internal resources. The VPN concentrator is a single point of failure. The company wants to ensure that remote workers can still work if the primary VPN concentrator fails. Which approach best addresses availability while maintaining confidentiality?

Increase the bandwidth of the internet connection to the VPN concentrator.

Allow remote workers to use a web-based remote desktop tool without VPN.

Store VPN credentials on the user's laptop so they can reconnect faster.

Deploy a second VPN concentrator in an active-passive cluster with automatic failover.

CiscoCertified CyberOps Associate

Domain 1Objective 1

1.1 Describe the CIA Triad 200-201 Practice Questions (Page 3)

Part of the 1.0 Security Concepts domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

4concepts

20%of the exam

Questions 11–15

11expert · hard
A security architect must choose between two designs for a remote-access VPN: one uses a strong encryption algorithm that adds 300 ms latency, and the other uses a lighter algorithm with 50 ms latency but weaker confidentiality. The business requires real-time video conferencing. What is the most appropriate decision?
Select an answer first
12expert · hard
A company's online banking system experiences periodic outages during peak hours. The security team proposes adding more servers, but management is concerned about cost. Which approach would BEST balance availability and cost?
Select an answer first
13application · medium
A company's email server crashes every time a large marketing campaign is sent, causing employees to lose access to email for hours. Which measure would BEST improve availability?
Select an answer first
14application · medium
A hospital's patient portal allows doctors to view lab results. The compliance team requires that only the treating physician can see a patient's HIV status. Which control directly enforces this requirement?
Select an answer first
15application · medium
A company's remote employees use a VPN to access internal resources. The VPN concentrator is a single point of failure. The company wants to ensure that remote workers can still work if the primary VPN concentrator fails. Which approach best addresses availability while maintaining confidentiality?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.