200-201 Free Practice Test

Which type of evidence supports a theory or an assumption that results from initial evidence?

1. A. probabilistic
2. B. indirect
3. C. best
4. D. corroborative

Correct Answer: D
Corroborating evidence (or corroboration) is evidence that tends to support a theory or an assumption deduced by some initial evidence. This corroborating evidence confirms the proposition. Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

What is the difference between discretionary access control (DAC) and role-based access control (RBAC)?

1. A. DAC requires explicit authorization for a given user on a given object, and RBAC requires specific conditions.
2. B. RBAC access is granted when a user meets specific conditions, and in DAC, permissions are applied on user and group levels.
3. C. RBAC is an extended version of DAC where you can add an extra level of authorization based on time.
4. D. DAC administrators pass privileges to users and groups, and in RBAC, permissions are applied to specific groups

Correct Answer: A

What is a difference between an inline and a tap mode traffic monitoring?

1. A. Inline monitors traffic without examining other devices, while a tap mode tags traffic and examines the data from monitoring devices.
2. B. Tap mode monitors traffic direction, while inline mode keeps packet data as it passes through the monitoring devices.
3. C. Tap mode monitors packets and their content with the highest speed, while the inline mode draws a packet path for analysis.
4. D. Inline mode monitors traffic path, examining any traffic at a wire speed, while a tap mode monitors traffic as it crosses the network.

Correct Answer: D

What is a sandbox interprocess communication service?

1. A. A collection of rules within the sandbox that prevent the communication between sandboxes.
2. B. A collection of network services that are activated on an interface, allowing for inter-port communication.
3. C. A collection of interfaces that allow for coordination of activities among processes.
4. D. A collection of host services that allow for communication between sandboxes.

Correct Answer: C
Inter-process communication (IPC) allows communication between different processes. A process is one or more threads running inside its own, isolated address space. https://docs.legato.io/16_10/basicIPC.html

A security engineer has a video of a suspect entering a data center that was captured on the same day that files in the same data center were transferred to a competitor.
Which type of evidence is this?

1. A. best evidence
2. B. prima facie evidence
3. C. indirect evidence
4. D. physical evidence

Correct Answer: C
There are three general types of evidence:
--> Best evidence: can be presented in court in the original form (for example, an exact copy of a hard disk drive).
--> Corroborating evidence: tends to support a theory or an assumption deduced by some initial evidence. This corroborating evidence confirms the proposition.
--> Indirect or circumstantial evidence: extrapolation to a conclusion of fact (such as fingerprints, DNA evidence, and so on).