Cisco CyberOps Associate 200-201 Questions & Answers

• Question 321:

  Which action should be taken if the system is overwhelmed with alerts when false positives and false negatives are compared?

  A. Modify the settings of the intrusion detection system.

  B. Design criteria for reviewing alerts.

  C. Redefine signature rules.

  D. Adjust the alerts schedule.

  Correct Answer: A

  Traditional intrusion detection system (IDS) and intrusion prevention system (IPS) devices need to be tuned to avoid false positives and false negatives. Next- generation IPSs do not need the same level of tuning compared to traditional IPSs.

  Also, you can obtain much deeper reports and functionality, including advanced malware protection and retrospective analysis to see what happened after an attack took place.

  Ref: Cisco CyberOps Associate CBROPS 200-201 Official Cert Guide

• Question 322:

  How does certificate authority impact a security system?

  A. It authenticates client identity when requesting SSL certificate

  B. It validates domain identity of a SSL certificate

  C. It authenticates domain identity when requesting SSL certificate

  D. It validates client identity when communicating with the se

  Correct Answer: B