SkillTestPro | CyberOps Associate Incident Response Questions

Cisco CyberOps Associate Practice Test 13

Cisco Certified CyberOps Associate

1 / 10

Which command in Linux lists current processes with associated PIDs?

top

whoami

pwd

echo

2 / 10

A log shows repeated “403 Forbidden” messages followed by “200 OK” for the same user account. What might this indicate?

Normal browsing behavior

Server misconfiguration

Expired TLS certificate

Network loop

Successful brute-force or privilege escalation

3 / 10

Which method is often used to exfiltrate data without detection?

HTTP POST requests with encoded payloads

ICMP echo replies with small pings

UDP port scanning

ARP flooding

SNMP polling

4 / 10

What does the “Principle of Least Privilege” recommend?

Users should only have access required for their role

Admins must share accounts for accountability

All data should be publicly available by default

Everyone should be allowed to escalate privileges

Users should manage their own firewalls

5 / 10

What is the main purpose of red team exercises?

To configure new firewall rules

To patch vulnerabilities in servers

To train staff in helpdesk operations

To validate security monitoring by simulating real attacks

To collect compliance metrics

6 / 10

Which Cisco solution provides DNS-layer security to block malicious domains?

Cisco Stealthwatch

Cisco Umbrella

Cisco Duo

Cisco Firepower

Cisco ISE

7 / 10

A phishing site looks identical to a company’s login page but uses a misspelled domain. What is this technique called?

URL redirection

Typosquatting

Session hijacking

Credential stuffing

Cross-site scripting

8 / 10

Which tool is used to analyze packet captures in a GUI?

Nmap

Metasploit

Tcpdump

Snort

Wireshark

9 / 10

Which part of the MITRE ATT&CK framework involves an attacker gaining and maintaining remote access?

Initial Access

Execution

Persistence

Discovery

Exfiltration

10 / 10

What is the main difference between IDS and IPS?

IDS blocks malicious traffic automatically

IDS only detects, IPS can block

IPS only runs on hosts, IDS only runs on networks

IDS uses encryption, IPS does not

IDS is obsolete technology

Your score is

The average score is 97%