A threat analyst is presenting to the malware analysis team about a new ransomware variant. The dashboard shows the file hash, the command-and-control (C2) IP addresses, the encryption algorithm, and the number of affected hosts. Which presentation best supports the malware analysis team's work?

Show the number of affected hosts and the business impact of the ransomware.

Present a high-level summary of the ransomware's capabilities without technical details.

Provide the file hash and C2 IP addresses, and explain the encryption algorithm used by the variant.

Provide the raw memory dump of an infected host and ask the team to reverse-engineer it.

A security analyst is asked to present the same dashboard data to two different groups: the IT operations team and the senior management team. The data includes a spike in failed login attempts, an increase in patching compliance, and a new zero-day vulnerability alert. How should the analyst tailor the presentations?

For senior management, present only the patching compliance percentage; for IT operations, present only the zero-day vulnerability details.

For IT operations, focus on the failed login attempts and the zero-day vulnerability with technical indicators; for senior management, focus on the risk of a breach and the patching compliance as a mitigating control.

For IT operations, present a high-level summary; for senior management, present a detailed technical report.

Present the same detailed technical slides to both groups to ensure consistency.

A security analyst is reviewing the weekly dashboard and sees that the number of blocked emails has increased by 50%, but the number of reported phishing emails has decreased by 20%. The analyst also sees that a new email security rule was implemented. What is the most accurate interpretation?

The decrease in reported phishing emails indicates that users are less aware of phishing threats.

The increase in blocked emails is a sign that the email system is malfunctioning.

The decrease in reported phishing emails is a positive sign that users are no longer falling for phishing.

The new email security rule is likely blocking more phishing emails, which reduces the number of phishing emails that reach users and thus the number reported.

A security manager is presenting dashboard data to the CISO to support a decision on whether to invest in new security tools. What is the most effective way to frame the data?

Present all raw data and let the CISO draw their own conclusions.

Focus only on the technical capabilities of the new tools without discussing risks.

Highlight the risks and potential business impact of not investing, along with actionable recommendations.

Emphasize the cost of the tools and avoid discussing security benefits.

A security engineer is presenting to the IT operations team about a recurring network intrusion. The dashboard shows the source IPs, destination ports, packet captures, and a time-series of alerts. The IT operations team needs to implement a firewall rule to block the intrusion. Which presentation best supports this task?

Show the business impact of the intrusion and recommend that the IT operations team prioritize the task.

Summarize the alert count and state that the intrusion is recurring, without providing specific details.

Show the source IPs and destination ports, and correlate them with the alert time-series to identify the pattern.

Provide the packet captures and ask the IT operations team to analyze them to determine the necessary firewall rule.

CiscoCertified Network Professional Cybersecurity (CBRCOR)

Domain 2Objective 19

2.19 Apply Dashboard Data to Communicate with Technical, Leadership, or Executive Stakeholders 350-201 Practice Questions (Page 7)

Part of the Techniques domain, which accounts for 30% of the 350-201 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

5concepts

30%of the exam

Questions 31–35

31application · medium
A threat analyst is presenting to the malware analysis team about a new ransomware variant. The dashboard shows the file hash, the command-and-control (C2) IP addresses, the encryption algorithm, and the number of affected hosts. Which presentation best supports the malware analysis team's work?
Select an answer first
32application · medium
A security analyst is asked to present the same dashboard data to two different groups: the IT operations team and the senior management team. The data includes a spike in failed login attempts, an increase in patching compliance, and a new zero-day vulnerability alert. How should the analyst tailor the presentations?
Select an answer first
33application · medium
A security analyst is reviewing the weekly dashboard and sees that the number of blocked emails has increased by 50%, but the number of reported phishing emails has decreased by 20%. The analyst also sees that a new email security rule was implemented. What is the most accurate interpretation?
Select an answer first
34foundation · easy
A security manager is presenting dashboard data to the CISO to support a decision on whether to invest in new security tools. What is the most effective way to frame the data?
Select an answer first
35expert · hard
A security engineer is presenting to the IT operations team about a recurring network intrusion. The dashboard shows the source IPs, destination ports, packet captures, and a time-series of alerts. The IT operations team needs to implement a firewall rule to block the intrusion. Which presentation best supports this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-201

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-201” is a trademark of its owner, used for identification only.

2.19 Apply Dashboard Data to Communicate with Technical, Leadership, or Executive Stakeholders 350-201 Practice Questions (Page 7)

Questions 31–35

A threat analyst is presenting to the malware analysis team about a new ransomware variant. The dashboard shows the file hash, the command-and-control (C2) IP addresses, the encryption algorithm, and the number of affected hosts. Which presentation best supports the malware analysis team's work?

A security analyst is reviewing the weekly dashboard and sees that the number of blocked emails has increased by 50%, but the number of reported phishing emails has decreased by 20%. The analyst also sees that a new email security rule was implemented. What is the most accurate interpretation?

A security manager is presenting dashboard data to the CISO to support a decision on whether to invest in new security tools. What is the most effective way to frame the data?

Keep studying — Techniques