Drag and drop the type of evidence from the left onto the description of that evidence on the right.

Answer is in the explanation below.
Loading demo links...
Showing 1–15 of 15 questions
Drag and drop the type of evidence from the left onto the description of that evidence on the right.

Answer is in the explanation below.
DRAG DROP

Refer to the exhibit. Drag and drop the element name from the left onto the correct piece of the PCAP file on the right.
Select and Place:

Answer is in the explanation below.
Which are two denial-of-service attacks? (Choose two.)
Select all that apply, then click Submit answer.
TCP connections
ping of death
man-in-the-middle
code-red
UDP flooding
Which two components reduce the attack surface on an endpoint? (Choose two.)
Select all that apply, then click Submit answer.
load balancing
increased audit log levels
restricting USB ports
full packet captures at the endpoint
What ate two categories of DDoS attacks? (Choose two.)
Select all that apply, then click Submit answer.
scanning
phishing
reflected
direct
What are the two differences between stateful and deep packet inspection? (Choose two )
Select all that apply, then click Submit answer.
Stateful inspection is capable of TCP state tracking, and deep packet filtering checks only TCP source and destination ports
Deep packet inspection is capable of malware blocking, and stateful inspection is not
Deep packet inspection operates on Layer 3 and 4. and stateful inspection operates on Layer 3 of the OSI model
Deep packet inspection is capable of TCP state monitoring only, and stateful inspection can inspect TCP and UDP.
Stateful inspection is capable of packet data inspections, and deep packet inspection is not
Which two elements are assets in the role of attribution in an investigation? (Choose two.)
Select all that apply, then click Submit answer.
context
session
laptop
firewall logs
threat actor
What are two social engineering techniques? (Choose two.)
Select all that apply, then click Submit answer.
privilege escalation
DDoS attack
phishing
man-in-the-middle
pharming
What is a description of a social engineering attack?
Select an option, then click Submit answer.
Refer to the exhibit.

An engineer is reviewing a Cuckoo report of a file. What must the engineer interpret from the report?
Select an option, then click Submit answer.
The file will appear legitimate by evading signature-based detection.
The file will not execute its behavior in a sandbox environment to avoid detection.
The file will insert itself into an application and execute when the application is run.
The file will monitor user activity and send the information to an outside source.
Which technology prevents end-device to end-device IP traceability?
Select an option, then click Submit answer.
encryption
load balancing
NAT/PAT
tunneling
Which metric is used to capture the level of access needed to launch a successful attack?
Select an option, then click Submit answer.
user interaction
attack complexity
attack vector
Which vulnerability type is used to read, write, or erase information from a database?
Select an option, then click Submit answer.
cross-site request forgery
buffer overflow
SQL injection
An analyst is exploring the functionality of different operating systems.
What is a feature of Windows Management Instrumentation that must be considered when deciding on an operating system?
Select an option, then click Submit answer.
queries Linux devices that have Microsoft Services for Linux installed
deploys Windows Operating Systems in an automated fashion
is an efficient tool for working with Active Directory
has a Common Information Model, which describes installed hardware and software
What describes a buffer overflow attack?
Select an option, then click Submit answer.
injecting new commands into existing buffers
fetching data from memory buffer registers
overloading a predefined amount of memory
suppressing the buffers in a process
Thinking of taking the Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) (200-201) exam? This free Cisco practice test is the place to start. The 15 questions are a free sample of the full Study4Pass practice set of 263 questions, so you can check your level before you commit to the real exam. The free sample includes 7 single-answer, 6 multiple-answer and 2 drag-and-drop questions — the same mix of formats you will meet in the full set. Questions are spread across the areas that matter most on the real exam: Network Fundamentals, Security Fundamentals, Automation and Programmability and Infrastructure and Services. The Cisco 200-201 exam is a certification exam that tests a candidate's knowledge and skills related to the Cisco Certified CyberOps Associate certification.
The target audience for the Cisco 200-201 exam is Network Engineers, Network Administrators, and Network Designers who have at least one year of experience with Cisco devices and technologies. The Cisco 200-201 exam requires that you have a valid CCNA certification or an understanding of the topics covered in the Cisco CCNA certification exam.
Treat this sample as a diagnostic. Answer honestly, check the explanation after every question, and note which topics feel shaky. A short, focused review of those topics is worth more than re-reading everything — and the full set lets you drill them topic by topic.
A good way to use this page: take the whole sample in one sitting, then go back over every explanation with fresh eyes. Mark the topics that felt uncertain, not just the ones you got wrong — uncertain answers are unmarked risk on the real exam. One or two focused passes like this usually move a score more than days of passive reading.
Inside the full 200-201 practice set:
Answer a question, then check the result to see the correct answer and the explanation behind it. Work at your own pace — there is no timer and no signup. Stuck on a concept? This is an AI-Enabled practice test: use Ask AI on any question and get the underlying concept explained in plain words, so you learn the reasoning instead of memorizing answers. When the free sample feels comfortable, the full set of 263 questions adds timed Exam Simulation, topic-by-topic training, and flagged-question review — the closest thing to exam day you can get before the real thing.
Yes. Every question on this page — all 15 of them — is free to use, and you never need to create an account to try them.
The full Study4Pass set for 200-201 has 263 practice questions. This page gives you 15 of them free so you can judge the quality and difficulty first.
Yes. Check any question to reveal the correct answer and its explanation, and use Ask AI whenever you want the underlying concept explained step by step.
No — these are practice questions built to match the 200-201 domains and difficulty level, so you can prepare for the real exam with confidence.