CiscoCertified CyberOps Associate
Domain 4Objective 7
4.7 Identify Key Elements in an Intrusion from a Given PCAP File 200-201 Practice Questions (Page 2)
Part of the 4.0 Network Intrusion Analysis domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)
41questions here
9free pages
7concepts
20%of the exam
Questions 6–10
- 6
When analyzing a PCAP file in Wireshark, where would you typically find the source IP address of a packet?
Select an answer first - 7
In a UDP datagram captured in a PCAP file, where is the source port number located?
Select an answer first - 8
In a PCAP file, how is the captured data for each packet stored?
Select an answer first - 9
A PCAP shows a UDP packet with source IP 192.168.1.10, destination IP 8.8.8.8, source port 12345, and destination port 53. The analyst needs to identify the server that will receive the query. Which field should be used?
Select an answer first - 10
When analyzing a UDP packet in a PCAP, how can you determine the destination port?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.