Practice 350-201 Exam Online

Question 1

Refer to the exhibit.

Where are the browser page rendering permissions displayed?

A : x-frame-options

B : x-xss-protection

C : x-content-type-options

D : x-test-debug

Answer: C

Question 2

Refer to the exhibit.

What results from this script?

A : Seeds for existing domains are checked

B : A search is conducted for additional seeds

C : Domains are compared to seed rules

D : A list of domains as seeds is blocked

Answer: B

Question 3

An analyst received multiple alerts on the SIEM console of users that are navigating to malicious URLs. The analyst needs to automate the task of receiving alerts and processing the data for further investigations. Three variables are available from the SIEM console to include in an automation script: console_ip, api_token, and reference_set_name. What must be added to this script to receive a successful HTTP response?

#!/usr/bin/python import sys import requests

A : {1}, {2}

B : {1}, {3}

C : console_ip, api_token

D : console_ip, reference_set_name

Answer: C

Question 4

A company's web server availability was breached by a DDoS attack and was offline for 3 hours because it was not deemed a critical asset in the incident response playbook. Leadership has requested a risk assessment of the asset. An analyst conducted the risk assessment using the threat sources, events, and vulnerabilities. Which additional element is needed to calculate the risk?

A : assessment scope

B : event severity and likelihood

C : incident response playbook

D : risk model framework

Answer: D

Question 5

A SOC analyst detected a ransomware outbreak in the organization coming from a malicious email attachment. Affected parties are notified, and the incident response team is assigned to the case. According to the NIST incident response handbook, what is the next step in handling the incident?

A : Create a follow-up report based on the incident documentation.

B : Perform a vulnerability assessment to find existing vulnerabilities.

C : Eradicate malicious software from the infected machines.

D : Collect evidence and maintain a chain-of-custody during further analysis.

Answer: D

Name:	Performing CyberOps Using Core Security Technologies
Exam Code:	350-201
Certification:	Cisco Cybersecurity Specialist
Vendor:	Cisco
Total Questions:	140
Last Updated:	Aug 13, 2026

Cisco 350-201 Answers