A security engineer is designing a secure communication channel between two servers in different data centers. The engineer wants to ensure that the servers authenticate each other and that the data is encrypted. Which approach best meets these requirements?

Use IPsec with certificates only for encryption, not authentication.

Use TLS with server-only authentication, where only the receiving server presents a certificate.

Use a pre-shared key (PSK) for encryption and authentication.

Use TLS with mutual authentication, where each server presents a certificate to the other.

A small company wants to issue certificates to its employees for internal web applications. The company wants to minimize cost and administrative overhead while still maintaining a controlled trust anchor. Which PKI deployment model should the company choose?

Set up a two-tier PKI with a root CA and an intermediate CA.

Run an internal root CA and issue certificates directly from it.

Purchase certificates from a public CA for each internal application.

Use self-signed certificates on each server without a central CA.

A company is planning to deploy a PKI for internal services. The security team wants to ensure that clients can verify the revocation status of certificates in real time without downloading large CRLs. Which technology should they implement?

Certificate revocation list (CRL) distribution points

Online Certificate Status Protocol (OCSP)

Certificate signing request (CSR)

Which statement correctly describes a key difference between symmetric and asymmetric encryption?

Symmetric encryption uses two different keys, while asymmetric uses the same key

Asymmetric encryption is generally faster than symmetric encryption

Symmetric encryption uses a single shared key, while asymmetric uses a public/private key pair

Asymmetric encryption requires a pre-shared key to be exchanged securely

A company is setting up a private PKI for internal services. The security team wants to minimize the risk of a single compromised root CA key. They also want to be able to issue certificates for different purposes (e.g., server auth, client auth) with different validity periods. What is the best practice for structuring the PKI?

Use a public CA for all internal certificates

Use a self-signed certificate for each server

Use an offline root CA and one or more subordinate CAs for different purposes

Use a single root CA to issue all certificates directly

CiscoCertified CyberOps Associate

Domain 2Objective 10

symmetric) 200-201 Practice Questions (Page 7)

Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

5concepts

25%of the exam

Questions 31–35

31expert · hard
A security engineer is designing a secure communication channel between two servers in different data centers. The engineer wants to ensure that the servers authenticate each other and that the data is encrypted. Which approach best meets these requirements?
Select an answer first
32application · medium
A small company wants to issue certificates to its employees for internal web applications. The company wants to minimize cost and administrative overhead while still maintaining a controlled trust anchor. Which PKI deployment model should the company choose?
Select an answer first
33application · medium
A company is planning to deploy a PKI for internal services. The security team wants to ensure that clients can verify the revocation status of certificates in real time without downloading large CRLs. Which technology should they implement?
Select an answer first
34foundation · easy
Which statement correctly describes a key difference between symmetric and asymmetric encryption?
Select an answer first
35application · medium
A company is setting up a private PKI for internal services. The security team wants to minimize the risk of a single compromised root CA key. They also want to be able to issue certificates for different purposes (e.g., server auth, client auth) with different validity periods. What is the best practice for structuring the PKI?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.