A security analyst needs to export a certificate and its private key from a Windows server to migrate to a new server. The analyst wants to ensure the private key is protected during transport. Which file format should be used?

Base64-encoded certificate (.crt)

A security analyst is reviewing a TLS configuration that supports TLS 1.2 and TLS 1.3. The analyst notices that the server's cipher suite list includes TLS_AES_128_GCM_SHA256 and TLS_AES_256_GCM_SHA384. A client connects using TLS 1.3. Which statement about the negotiated cipher suite is correct?

The cipher suite name does not include a key exchange method because TLS 1.3 uses a fixed ephemeral Diffie-Hellman key exchange

The cipher suite is only compatible with TLS 1.2

The cipher suite includes RSA for authentication and key exchange

The cipher suite uses a static Diffie-Hellman key exchange

CiscoCertified CyberOps Associate

Domain 2Objective 11

2.11 Identify the Certificate Components in a Given Scenario 200-201 Practice Questions (Page 1)

Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

6concepts

25%of the exam

Questions 1–5

1foundation · easy
An analyst is examining an X.509 certificate and needs to determine which entity the certificate was issued to. Which field in the certificate contains this information?
Select an answer first
2foundation · easy
A security analyst is reviewing network traffic and sees a TLS handshake that uses a cipher suite with an ephemeral Diffie-Hellman key exchange and supports only AEAD ciphers. Which TLS version is most likely being used?
Select an answer first
3foundation · easy
Which PKCS standard defines the format for a certificate signing request (CSR) that is sent to a certificate authority to request a certificate?
Select an answer first
4expert · medium
A security analyst needs to export a certificate and its private key from a Windows server to migrate to a new server. The analyst wants to ensure the private key is protected during transport. Which file format should be used?
Select an answer first
5expert · hard
A security analyst is reviewing a TLS configuration that supports TLS 1.2 and TLS 1.3. The analyst notices that the server's cipher suite list includes TLS_AES_128_GCM_SHA256 and TLS_AES_256_GCM_SHA384. A client connects using TLS 1.3. Which statement about the negotiated cipher suite is correct?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.

2.11 Identify the Certificate Components in a Given Scenario 200-201 Practice Questions (Page 1)

Questions 1–5

An analyst is examining an X.509 certificate and needs to determine which entity the certificate was issued to. Which field in the certificate contains this information?

A security analyst is reviewing network traffic and sees a TLS handshake that uses a cipher suite with an ephemeral Diffie-Hellman key exchange and supports only AEAD ciphers. Which TLS version is most likely being used?

Which PKCS standard defines the format for a certificate signing request (CSR) that is sent to a certificate authority to request a certificate?

A security analyst needs to export a certificate and its private key from a Windows server to migrate to a new server. The analyst wants to ensure the private key is protected during transport. Which file format should be used?

A security analyst is reviewing a TLS configuration that supports TLS 1.2 and TLS 1.3. The analyst notices that the server's cipher suite list includes TLS_AES_128_GCM_SHA256 and TLS_AES_256_GCM_SHA384. A client connects using TLS 1.3. Which statement about the negotiated cipher suite is correct?

Keep studying — 2.0 Security Monitoring