Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Cisco logo

CiscoCertified CyberOps Associate

Domain 3Objective 2

3.2 Identify Components of an Operating System (such as Windows and Linux) in a Given Scenario 200-201 Practice Questions (Page 1)

Part of the 3.0 Host-Based Analysis domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here
10free pages
8concepts
20%of the exam

Questions 1–5

  1. 1foundation · easy

    In Windows, where are system logs such as Security and Application logs stored and viewed?

    Select an answer first
  2. 2foundation · easy

    In Linux, which command is used to run a command with elevated privileges (typically as the root user)?

    Select an answer first
  3. 3expert · medium

    A Linux application is experiencing performance issues. The administrator suspects that the application is spawning too many threads, causing excessive context switching. Which command should the administrator use to confirm the number of threads per process?

    Select an answer first
  4. 4expert · hard

    A Linux administrator is investigating a security incident. The logs show that a user 'alice' ran 'sudo su -' to become root at 02:00. The administrator checks /var/log/auth.log and sees the sudo entry. However, the administrator cannot find any commands executed after the 'su -' in the logs. Which OS component explains this gap?

    Select an answer first
  5. 5expert · hard

    A Windows server has a shared folder where users report they can create files but cannot delete files created by other users. The folder is on an NTFS volume. The administrator checks the folder's sharing permissions and confirms 'Everyone' has 'Full Control' share permission. Which configuration is most likely causing the issue?

    Select an answer first
Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.