
CiscoCertified CyberOps Associate
Domain 4Objective 10
4.10 Interpret Basic Regular Expressions 200-201 Practice Questions (Page 1)
Part of the 4.0 Network Intrusion Analysis domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)
11questions here
3free pages
7concepts
20%of the exam
Questions 1–5
- 1
An analyst is writing a regex to detect login attempts where the username field is exactly 'admin' and is followed by a space and then a timestamp. The log format is 'username=admin 2023-10-05 14:30:00'. Which regex would match only when 'admin' appears as a whole word and is followed by a space?
Select an answer first - 2
In the regular expression [^aeiou], what does the caret (^) inside the square brackets indicate?
Select an answer first - 3
Which quantifier matches exactly three occurrences of the preceding character?
Select an answer first - 4
In the regular expression ^192\.168\.1\.\d+$, what do the caret (^) and dollar sign ($) do?
Select an answer first - 5
A security analyst is writing a regex to match a suspicious user-agent string that contains a literal dot and a literal plus sign. The analyst wants to match the exact characters '.' and '+' in the log line. Which regex correctly matches the literal dot and plus sign?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.