CiscoCertified CyberOps Associate
Domain 2Objective 2
2.2 Identify the Types of Data Provided by These Technologies 200-201 Practice Questions (Page 7)
Part of the 2.0 Security Monitoring domain, which accounts for 25% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
7concepts
25%of the exam
Questions 31–34
- 31
A security analyst runs tcpdump to capture traffic on an interface. Which type of data is directly available from the tcpdump output?
Select an answer first - 32
Which type of data is NOT provided by NetFlow?
Select an answer first - 33
A company is deploying a new security monitoring solution. The security team needs to: (1) identify which users are using a specific cloud application, (2) block access to a known malicious URL category, and (3) log connection state for troubleshooting. The budget allows for only one new security device. Which technology should be selected to meet all three requirements?
Select an answer first - 34
An analyst needs to examine the exact payload of a suspicious HTTP request to identify a possible SQL injection attempt. Which data source provides the payload content?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 200-201
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.