SkillTestPro | Cisco CyberOps Associate Practice Test

Cisco CyberOps Associate practice test

Cisco Certified CyberOps Associate

1 / 10

A network administrator wants to protect a critical server from unauthorized access. The security policy states that only administrators from a specific IP address range should be allowed to access it. Which security control would be most effective?

A strong password policy

A host-based firewall

A network intrusion detection system (NIDS)

A vulnerability scanner

An antivirus software

2 / 10

In the Cyber Kill Chain, which phase involves the attacker attempting to exploit a vulnerability on the target system?

Reconnaissance

Weaponization

Delivery

Exploitation

Installation

3 / 10

An analyst is performing host-based forensics on a Windows machine. Which file system artifact can be used to determine the last time a file was accessed?

Master File Table (MFT)

Registry Hives

Event Logs

Jump Lists

Prefetch files

4 / 10

What is the purpose of a Security Operations Center (SOC)?

To provide physical security for an organization's data center.

To manage all network infrastructure, including routers and switches.

To manage and monitor an organization's security systems and respond to incidents.

To develop and enforce security policies and procedures.

To provide a platform for software development.

5 / 10

A user receives an email that appears to be from their bank, asking them to click a link and log in to verify their account information. What type of social engineering attack is this?

Tailgating

Baiting

Phishing

Pretexting

Quid pro quo

6 / 10

Which of the following describes the primary role of a Security Information and Event Management (SIEM) system?

To actively block malicious network traffic based on known signatures.

To collect and analyze log data from various sources to provide a centralized view of security events.

To scan the network for open ports and vulnerabilities.

To provide an encrypted tunnel for remote access.

To manage and audit all user accounts.

7 / 10

Which of the following is a common method for an attacker to maintain persistence on a compromised host?

Disabling the host's firewall

Changing the host's IP address

Installing a legitimate software application

Deleting all log files

Creating a scheduled task or service to run a malicious executable

8 / 10

A security analyst needs to review network traffic to identify the source and destination IP addresses, and the ports used in a communication. Which of the following would be the most efficient tool for this?

A SIEM system

A vulnerability scanner

A packet capture tool like Wireshark

A flow analysis tool like NetFlow

An endpoint detection and response (EDR) agent

9 / 10

What is the purpose of an Incident Response Plan?

To provide a list of all vulnerabilities in the network.

To define the procedures and roles for handling security incidents.

To automatically block all malicious traffic.

To manage and audit all user accounts.

To generate a report of all network connections.

10 / 10

A security analyst observes a large volume of DNS queries from an internal host to a suspicious domain. Which type of security tool would be most effective for detecting this type of behavior?

An Intrusion Prevention System (IPS)

A vulnerability scanner

A host-based firewall

A Network Intrusion Detection System (NIDS)

A DNS sinkhole

Your score is

The average score is 70%