Matching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation.
Start Scenario PracticeMatch each network protocol to its well-known port number.
Explanation: Standard well-known port assignments: HTTP=80, HTTPS=443, SSH=22, DNS=53. Common confusions include swapping HTTP/HTTPS ports or confusing SSH with Telnet.
Match each Linux command to its function.
Explanation: These commands are essential for Linux system administration and security analysis.
Match each Windows event log type to its description.
Explanation: In Windows Event Viewer, the main logs are Application (software events), Security (audit events), Setup (installation events), System (system component events), and Forwarded Events (remote logs). Common confusions include mixing Application and System logs, or Security with Setup.
Match each log severity level to its description (syslog).
Explanation: Syslog severity levels are from 0 (Emergency) to 7 (Debug). Emergency, Alert, Critical, Error, Warning, Notice, Informational, and Debug are standard levels. Common confusions involve swapping levels with similar descriptions.
Match each cybersecurity framework/standard to its focus.
Explanation: Correct matches: NIST CSF for critical infrastructure, ISO 27001 for ISMS, PCI DSS for cardholder data, CIS Controls for prioritized security actions. Common confusions include swapping these terms.
+2 more scenario questions available
Practice all Drag and Drop Matching QuestionsMatching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation. These appear throughout the 200-201 and require you to apply your knowledge, not just recall facts.
Cisco doesn't publish an exact breakdown, but scenario-based questions (especially exhibit and command-output formats) make up a significant portion of the 200-201. Practicing each scenario type ensures you're ready for any format.
Yes. Courseiva provides free 200-201 scenario practice across all official exam domains. The platform includes scenario-based questions, command-output interpretation, topic-based practice, mock exams, and readiness tracking — no account required.
Launch a full Drag and Drop Matching Questions session with instant scoring and detailed explanations.
Start Scenario Practice →