Build your security analysis judgment with 120 original practice questions from Cloudpuz Academy. This course contains two different 60-question tests for learners preparing for CCNA Cybersecurity 200-201 CCNACBR v1.2. Work through focused scenarios and identify what the available evidence supports, which information is missing, and which next step fits the stated constraints.

Each test follows the five published domain weights: twelve Security Concepts questions, fifteen Security Monitoring questions, twelve Host-Based Analysis questions, twelve Network Intrusion Analysis questions and nine Security Policies and Procedures questions. This distribution supports balanced revision across the domains; it does not imply exhaustive coverage of every individual blueprint objective.

Security concepts include confidentiality, integrity and availability, layered controls, cloud and container visibility, access control models, SIEM correlation, SOAR approval boundaries and threat hunting. CVSS questions explicitly use version 3.1 where its metrics are discussed. Practice separating a vulnerability from a threat actor and assessing evidence without making unsupported claims.

Monitoring scenarios explore capture limits, flow records, firewall behavior, address translation, encrypted traffic, proxies, load balancers and baseline changes. Interpret signs of denial of service, spoofing, command and SQL injection, phishing, command-and-control activity and ransomware. Certificate and TLS questions distinguish identity validation, key material and encrypted session behavior.

Host analysis questions cover Windows authentication and process records, Sysmon correlation, Linux process context, persistence and cleared logs. Evaluate timestamps, hashes, sandbox findings, indicators, attribution limits, evidence handling and containment verification. Network questions examine detection outcomes, precision and recall, packet inspection, capture placement, reassembly, protocol records and simple regular expressions.

Policy and response scenarios address asset ownership, baseline exceptions, patch verification, vulnerability management, mobile-device controls and incident roles. Older NIST SP 800-61 Revision 2 phase terminology is explicitly labeled when used; a separate question distinguishes the current Revision 3 approach. Additional questions cover forensic working copies, activity profiles, protected information, intrusion frameworks and response timing.

Every question has four options, one best answer and explanations for all options. Overall feedback includes a reference for further study. Each test allows 120 minutes and uses a 70 percent practice threshold. This threshold is a learning checkpoint chosen for this course, not an official Cisco passing score. Review every option after Test 1 before attempting the different scenarios in Test 2.

This course provides written practice tests, without video lectures, a hosted lab or graded hands-on exercises. Basic networking, operating-system and security familiarity is recommended. Cloudpuz Academy is independent and is not affiliated with or endorsed by Cisco. There are no real exam dumps or passing guarantees. Combine these questions with official documentation and authorized practical exercises, and verify current exam requirements before booking.