A security analyst is explaining to a junior analyst how HTTPS protects data in transit. The analyst states that the session uses a symmetric key for bulk encryption. Which statement correctly explains why symmetric encryption is used for the bulk of the data?

Symmetric encryption is significantly faster than asymmetric encryption for large amounts of data.

Symmetric encryption does not require key exchange.

Symmetric encryption provides stronger confidentiality than asymmetric encryption.

Symmetric encryption is used to authenticate the server.

A security architect is selecting an encryption approach for a new messaging system. The system must support non-repudiation (proving who sent a message) and confidentiality (only the intended recipient can read it). Which combination of cryptographic operations should the architect implement?

Use a symmetric key to encrypt the message and a digital signature with the recipient's private key.

Encrypt the message with the sender's public key, then sign it with the recipient's private key.

Sign the message with the sender's private key, then encrypt the signed message with the recipient's public key.

Use the sender's private key to encrypt the message and the recipient's public key to sign it.

A security analyst is reviewing the certificate lifecycle for a set of servers. The analyst notices that several certificates were renewed but the old certificates were not revoked. Which risk does this pose?

The CA will automatically revoke the old certificates.

The old certificates remain valid until they expire, allowing them to be used if the private keys are compromised.

The new certificates will not be trusted by clients.

The old certificates will cause a performance degradation.

What is the purpose of certificate revocation in the certificate lifecycle?

To invalidate a certificate before its expiration date

To extend the validity period of a certificate

To verify the identity of the certificate holder

To publish the certificate to a public repository

CiscoCertified CyberOps Associate

Domain 2Objective 10

symmetric) 200-201 Practice Questions (Page 4)

Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

25%of the exam

Questions 16–20

16application · medium
A security analyst is explaining to a junior analyst how HTTPS protects data in transit. The analyst states that the session uses a symmetric key for bulk encryption. Which statement correctly explains why symmetric encryption is used for the bulk of the data?
Select an answer first
17expert · hard
A security architect is selecting an encryption approach for a new messaging system. The system must support non-repudiation (proving who sent a message) and confidentiality (only the intended recipient can read it). Which combination of cryptographic operations should the architect implement?
Select an answer first
18expert · hard
A security analyst is reviewing the certificate lifecycle for a set of servers. The analyst notices that several certificates were renewed but the old certificates were not revoked. Which risk does this pose?
Select an answer first
19foundation · easy
What is the purpose of certificate revocation in the certificate lifecycle?
Select an answer first
20foundation · easy
In a Public Key Infrastructure (PKI), which component is responsible for verifying the identity of an entity before a certificate is issued?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.