nerdexam
Cisco

200-201 · Question #406

Refer to the exhibit. What occurred on this system based on this output?

The correct answer is C. A user connected to the system using SSH using source port 55796. The system output indicates a user successfully connected via SSH, originating from a client using source port 55796.

Submitted by ngozi_ng· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. What occurred on this system based on this output?

Exhibit

200-201 question #406 exhibit

Options

  • AA user connected to the system using remote access VPN.
  • BA user connected to the system after 450 attempts.
  • CA user connected to the system using SSH using source port 55796.
  • DA user created a new HTTP session using the SHA256 hashing algorithm.

How the community answered

(14 responses)
  • B
    7% (1)
  • C
    79% (11)
  • D
    14% (2)

Why each option

The system output indicates a user successfully connected via SSH, originating from a client using source port 55796.

AA user connected to the system using remote access VPN.

Remote access VPN connections involve specific VPN protocols and connection establishment patterns, which are distinct from a direct SSH session.

BA user connected to the system after 450 attempts.

The output would need to explicitly state connection attempts or failures, not just a successful connection with a specific number.

CA user connected to the system using SSH using source port 55796.Correct

A successful SSH connection is typically indicated by specific log entries or network traffic patterns showing the SSH protocol (port 22 by default) and a client-side ephemeral source port like 55796 being used to establish the connection. This implies a user established an interactive session.

DA user created a new HTTP session using the SHA256 hashing algorithm.

HTTP sessions operate on different ports (80/443) and while SHA256 is a hashing algorithm, it is not a primary identifier for an HTTP session in the way source ports and protocols are.

Concept tested: Interpreting network connection logs/output

Topics

#Log analysis#SSH#Network protocols#System events

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice