CiscoCertified CyberOps Associate
Domain 4Objective 10
4.10 Interpret Basic Regular Expressions 200-201 Practice Questions (Page 2)
Part of the 4.0 Network Intrusion Analysis domain, which accounts for 20% of the 200-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–2 from this objective — we provide 11 practice questions to prepare you well beyond it. (estimate)
11questions here
3free pages
7concepts
20%of the exam
Questions 6–10
- 6
A SOC analyst is creating a regex to detect either 'failed' or 'denied' in a firewall log message. Which regex would match either word as a whole word?
Select an answer first - 7
In a regular expression, which metacharacter matches any single character except a newline?
Select an answer first - 8
Which regular expression matches the word "error" as a whole word, but not as part of a longer word like "error404"?
Select an answer first - 9
A security analyst is searching firewall logs for HTTP methods. Which regular expression would match only "GET" or "POST" as whole words?
Select an answer first - 10
An analyst is writing a regex to match a username that is exactly 'admin' in a log line, but the username field is followed by a colon and then a timestamp. The log format is 'user=admin:2023-10-05 14:30:00'. Which regex would match only when 'admin' is a whole word and is followed by a colon?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-201” is a trademark of its owner, used for identification only.