SkillTestPro | Cisco CyberOps Associate Mock Exam

Cisco CyberOps Associate Practice Test 4

Cisco Certified CyberOps Associate

1 / 10

In a digital forensics investigation, which type of data is the most volatile and should be collected first?

The hard drive

The Windows Registry

The memory (RAM)

The network traffic

The system logs

2 / 10

Which of the following is an example of a host-based analysis tool?

Wireshark

Nmap

NetFlow Collector

Snort

Sysinternals Process Explorer

3 / 10

What is the purpose of a Demilitarized Zone (DMZ)?

To separate the internal network from the external network and host public-facing servers.

To provide a secure, encrypted tunnel for remote access and host public-facing servers.

To act as a decoy to lure and trap attackers and host public-facing servers.

To scan the network for open ports and vulnerabilities.

To manage and audit all user accounts.

4 / 10

A security analyst is investigating a host that is making a large number of outbound connections to an external IP address. This is a potential sign of what?

A denial-of-service attack

A brute-force attack

A vulnerability scan

A command-and-control (C2) communication

A phishing attack

5 / 10

In the context of the Cisco CyberOps Associate exam, which of the following best describes the principle of confidentiality?

Ensuring that data is accurate and not tampered with

Ensuring that data is accessible to authorized users when needed

Ensuring that data is only accessible to authorized individuals or systems

Ensuring that data is encrypted at all times

Ensuring that all user actions are logged and traceable

6 / 10

What is the purpose of a Network Security Policy?

To define the rules for a firewall

To define an organization's approach to cybersecurity

To generate a report of all network connections

To manage and audit all user accounts

To provide a list of all vulnerabilities in the network

7 / 10

Which of the following is a common method for an attacker to perform network reconnaissance on a target?

A phishing attack

A DDoS attack

A buffer overflow

A man-in-the-middle attack

A port scan

8 / 10

What is the purpose of the ping command in a security context?

To test network connectivity and identify if a host is alive.

To scan for open ports and vulnerabilities.

To view a list of all network connections.

To resolve a domain name to an IP address.

To display the routing table.

9 / 10

Which of the following is an example of a physical security control?

A firewall

A VPN

A biometric scanner

An access control list (ACL)

An antivirus software

10 / 10

What is the primary goal of the eradication phase in the incident response process?

To remove the threat from the affected systems

To prevent the incident from spreading

To restore the affected systems from a clean backup

To analyze the incident to determine the root cause

To report the incident to law enforcement

Your score is

The average score is 65%