Logo ExamsQA
Exit
Official Bank 0/139

Performing CyberOps Using Core Security Technologies (CBRCOR) Exam (350-201) - Cisco Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
139 Total Questions
1
Question
Refer to the exhibit.

Exhibit

What is the connection status of the ICMP event?
Options
A allowed in the default action
B allowed by a configured access policy rule
C blocked by an intrusion policy rule
D blocked by a configured access policy rule
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Refer to the exhibit.

Exhibit

For IP 192.168.1.209, what are the risk level, activity, and next step?
Options
A high risk level, malicious host, investigate further
B critical risk level, malicious server IP, run in a sandboxed environment
C critical risk level, data exfiltration, isolate the device
D high risk level, anomalous periodic communication, quarantine with antivirus
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Refer to the exhibit.

Exhibit

A threat actor behind a single computer exploited a cloud-based application by sending multiple concurrent API requests. These requests made the application unresponsive. Which solution protects the application from being overloaded and ensures more equitable application access across the end-user community?
Options
A Increase the application cache of the total pool of active clients that call the API
B Add restrictions on the edge router on how often a single client can access the API
C Reduce the amount of data that can be fetched from the total pool of active clients that call the API
D Limit the number of API calls that a single client is allowed to make
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
DRAG DROP Drag and drop the cloud computing service descriptions from the left onto the cloud service categories on the right.

Exhibit
Reveal Only
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
An employee who often travels abroad logs in from a first-seen country during non-working hours. The SIEM tool generates an alert that the user is forwarding an increased amount of emails to an external mail domain and then logs out. The investigation concludes that the external domain belongs to a competitor. Which two behaviors triggered UEBA? (Choose two.)
Select 2
Options
A log in from a first-seen country
B increased number of sent mails
C log in during non-working hours
D email forwarding to an external domain
E domain belongs to a competitor
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.