Practice 200-201 Exam Online

Question 1

An engineer received a flood of phishing emails from HR with the source address HRjacobm@companycom. What is the threat actor in this scenario?

A : phishing email

B : sender

C : HR

D : receiver

Answer: B

Question 2

A security engineer must investigate a recent breach within the organization. An engineer noticed that a breached workstation is trying to connect to the domain "Ranso4730-mware92-647". which is known as malicious. In which step of the Cyber Kill Chain is this event?

A : Vaporization

B : Delivery

C : reconnaissance

D : Action on objectives

Answer: D

Question 3

What is rule-based detection when compared to statistical detection?

A : proof of a user's identity

B : proof of a user's action

C : likelihood of user's action

D : falsification of a user's identity

Answer: B

Question 4

What is the difference between inline traffic interrogation (TAPS) and traffic mirroring (SPAN)?

A :

TAPS interrogation is more complex because traffic mirroring applies additional tags to data and SPAN does not alter integrity and provides full duplex network.

B :

SPAN results in more efficient traffic analysis, and TAPS is considerably slower due to latency caused by mirroring.

C :

TAPS replicates the traffic to preserve integrity, and SPAN modifies packets before sending them to other analysis tools

D :

SPAN ports filter out physical layer errors, making some types of analyses more difficult, and TAPS receives all packets, including physical errors.

Answer: D

Question 5

Refer to the exhibit. A communication issue exists between hosts 192.168.0.11 and 34.253.101.190. What is a description of the initial TCP connection?

A : Handshake has been established

B : Fin flag is not set

C : Reset flag is not set

D : Acknowledge is not set

Answer: D

Name:	Understanding Cisco Cybersecurity Operations Fundamentals v1.2 (CCNACBR)
Exam Code:	200-201
Certification:	Cisco Cybersecurity Specialist
Vendor:	Cisco
Total Questions:	480
Last Updated:	Aug 03, 2026

Cisco 200-201 Answers