Performing CyberOps Using Core Security Technologies (CBRCOR) Exam (350-201) - Cisco

Exam Questions

94%

Students found the real exam almost the same

1,057

Students passed this exam after ExamsQA Prep

95.1%

Average score during Real Exams at the Testing Centre

Browse 139 Questions
đź’ˇ

Browse at least 50% questions to maximize your chances of passing

Free Preview Questions

Sample 350-201 Exam Questions & Explanations

Practice with real question formats, multiple choice options, and detailed answer explanations for Cisco 350-201.

Question #1 Verified Q&A
Refer to the exhibit.<br />
<br />
<img src="https://examsqa.com/storage/question-images/performing-cyberops-using-core-security-technologies-cbrcor-exam-350-201_page_1_Im2.jpg" alt="Exhibit" style="max-width: 100%; height: auto;" /><br />
<br />
A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?
A Increase the application cache of the total pool of active clients that call the API
B Add restrictions on the edge router on how often a single client can access the API
C Reduce the amount of data that can be fetched from the total pool of active clients that call the API
D Limit the number of API calls that a single client is allowed to make
Correct Answer: Limit the number of API calls that a single client is allowed to make
Question #2 Verified Q&A
DRAG DROP An organization lost connectivity to critical servers, and users cannot access business applications and internal websites. An engineer checks the network devices to investigate the outage and determines that all devices are functioning. Drag and drop the steps from the left into the sequence on the right to continue investigating this issue. Not all options are used.<br />
<br />
<img src="https://examsqa.com/storage/question-images/performing-cyberops-using-core-security-technologies-cbrcor-exam-350-201_page_2_Im3.jpg" alt="Exhibit" style="max-width: 100%; height: auto;" /><br />
<br />
<img src="https://examsqa.com/storage/question-images/performing-cyberops-using-core-security-technologies-cbrcor-exam-350-201_page_2_Im4.jpg" alt="Exhibit" style="max-width: 100%; height: auto;" />
Question #3 Verified Q&A
A threat actor attacked an organization’s Active Directory server from a remote location, and in a thirty-minute timeframe, stole the password for the administrator account and attempted to access 3 company servers. The threat actor successfully accessed the first server that contained sales data, but no files were downloaded. A second server was also accessed that contained marketing information and 11 files were downloaded. When the threat actor accessed the third server that contained corporate financial data, the session was disconnected, and the administrator’s account was disabled. Which activity triggered the behavior analytics tool?
A downloading more than 10 files
B accessing the server with financial data
C accessing multiple servers
D accessing the Active Directory server
Correct Answer: accessing multiple servers
Explanation:
<img src="https://examsqa.com/storage/question-images/performing-cyberops-using-core-security-technologies-cbrcor-exam-350-201_page_3_Im5.jpg" alt="Exhibit" style="max-width: 100%; height: auto;" />
Question #4 Verified Q&A
Refer to the exhibit. A security analyst needs to investigate a security incident involving several suspicious connections with a possible attacker. Which tool should the analyst use to identify the source IP of the offender?
A firewall manager
B malware analysis
C SIEM
D packet sniffer
Correct Answer: packet sniffer
Question #5 Verified Q&A
Refer to the exhibit.<br />
<br />
<img src="https://examsqa.com/storage/question-images/performing-cyberops-using-core-security-technologies-cbrcor-exam-350-201_page_4_Im6.jpg" alt="Exhibit" style="max-width: 100%; height: auto;" /><br />
<br />
Cisco Advanced Malware Protection installed on an end-user desktop has automatically submitted a low prevalence file to the Threat Grid analysis engine for further analysis. What should be concluded<br />
from this report?
A The prioritized behavioral indicators of compromise justify the execution of the “ransomware” because the scores are low and indicate the likelihood that malicious ransomware has been detected.
B The prioritized behavioral indicators of compromise do not justify the execution of the “ransomware” because the scores are high and do not indicate the likelihood of malicious ransomware.
C The prioritized behavioral indicators of compromise justify the execution of the “ransomware” because the scores are high and indicate the likelihood that malicious ransomware has been detected.
D The prioritized behavioral indicators of compromise do not justify the execution of the “ransomware” because the scores do not indicate the likelihood of malicious ransomware.
Correct Answer: The prioritized behavioral indicators of compromise justify the execution of the “ransomware” because the scores are high and indicate the likelihood that malicious ransomware has been detected.

Want to practice all 139 questions?

Practice under real exam conditions with instant grading, timed simulations, and community insights.

Start Full 350-201 Practice Test

Frequently Asked Questions

Common questions about the Cisco 350-201 certification practice test

How many questions are in the Cisco 350-201 practice exam on ExamsQA?
Our 350-201 (Performing CyberOps Using Core Security Technologies (CBRCOR) Exam) practice question bank currently includes 139 verified questions with comprehensive explanations.
Are the 350-201 exam practice questions up to date for 2026?
Yes, all Cisco 350-201 practice questions are regularly updated and verified against current exam objectives.
Will the 350-201 practice questions help me pass on my first attempt?
The 350-201 (Performing CyberOps Using Core Security Technologies (CBRCOR) Exam) question bank is built to mirror the real exam's format and topics, with detailed explanations for every answer so you understand the reasoning — not just memorize responses.
Is there a free demo available for 350-201 Performing CyberOps Using Core Security Technologies (CBRCOR) Exam?
Yes, ExamsQA offers free demo questions for the 350-201 exam so you can test the interface and question quality before purchasing full access.