A Windows administrator needs to track changes to a specific registry key for troubleshooting. The administrator wants to enable auditing for that key. Which step is required first?

Create a new event log for registry changes

Enable Audit Registry Object Access in the local security policy

Restart the Windows Event Log service

Set the registry key's permissions to allow Everyone to read

A Linux administrator needs to allow a group of users to write to a shared directory, but files created in that directory should only be deletable by their owner. Which configuration achieves this?

Set the setgid bit and the sticky bit on the directory

Add all users to the same group and set permissions to 770

Set the directory permissions to 777

Set the setuid bit on the directory

CiscoCertified CyberOps Associate

Domain 3Objective 2

3.2 Identify Components of an Operating System (such as Windows and Linux) in a Given Scenario 200-201 Practice Questions (Page 6)

Part of the 3.0 Host-Based Analysis domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

20%of the exam

Questions 26–30

26application · medium
A Linux system becomes unresponsive, and the administrator suspects a memory leak in a process. The administrator wants to identify which process is consuming the most memory. Which command should the administrator use?
Select an answer first
27expert · hard
A Windows administrator needs to track changes to a specific registry key for troubleshooting. The administrator wants to enable auditing for that key. Which step is required first?
Select an answer first
28foundation · easy
A Linux administrator needs to identify a background process that runs without direct user interaction and typically starts at boot. What is this type of process called?
Select an answer first
29foundation · easy
Which operating system component provides the interface that allows users to run commands and interact with the system?
Select an answer first
30expert · hard
A Linux administrator needs to allow a group of users to write to a shared directory, but files created in that directory should only be deletable by their owner. Which configuration achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

3.2 Identify Components of an Operating System (such as Windows and Linux) in a Given Scenario 200-201 Practice Questions (Page 6)

Questions 26–30

A Linux system becomes unresponsive, and the administrator suspects a memory leak in a process. The administrator wants to identify which process is consuming the most memory. Which command should the administrator use?

A Windows administrator needs to track changes to a specific registry key for troubleshooting. The administrator wants to enable auditing for that key. Which step is required first?

A Linux administrator needs to identify a background process that runs without direct user interaction and typically starts at boot. What is this type of process called?

Which operating system component provides the interface that allows users to run commands and interact with the system?

A Linux administrator needs to allow a group of users to write to a shared directory, but files created in that directory should only be deletable by their owner. Which configuration achieves this?

Keep studying — 3.0 Host-Based Analysis