Cisco Cisco Certified CyberOps Associate 210-250 Questions & Answers

• Question 1121:

  Which of the following are provided by threat intelligence feeds?

  A. Indicators of compromise

  B. IP addresses of attacking systems

  C. The overall risk score of all vulnerabilities in the corporate network

  D. The overall risk score of threats in the corporate network

  Correct Answer: AB

• Question 1122:

  What is a runbook?

  A. A runbook is a collection of processes running on a system.

  B. A runbook is a configuration guide for network security devices.

  C. A runbook is a collection of best practices for configuring access control lists on a firewall and other network infrastructure devices.

  D. A runbook is a collection of procedures and operations performed by system administrators, security professionals, or network operators.

  Correct Answer: D

• Question 1123:

  Chain of custody is the way you document and preserve evidence from the time you started the cyber forensics investigation to the time the evidence is:

  A. Documentation about how and when the evidence was collected

  B. Documentation about how evidence was transported

  C. Documentation about who had access to the evidence and how it was accessed

  D. Documentation about the CVSS score of a given CVE

  Correct Answer: ABC

• Question 1124:

  Which of the following are examples of personally identifiable information (PII)?

  A. Social security number

  B. Biological or personal characteristics, such as an image of distinguishing features, fingerprints, x-rays, voice signature, retina scan, and geometry of the face

  C. CVE

  D. Date of birth

  Correct Answer: D

• Question 1125:

  Which of the following statements are true about the principle of least privilege?

  A. Principle of least privilege and separation of duties can be considered to be the same thing.

  B. The principle of least privilege states that all users whether they are individual contributors, managers, directors, or executives should be granted only the level of privilege they need to do their job, and no more.

  C. Programs or processes running on a system should have the capabilities they need to "get their job done," but no root access to the system.

  D. The principle of least privilege only applies to people.

  Correct Answer: BC

• Question 1126:

  What is the Common Vulnerabilities and Exposures (CVE)?

  A. An identifier of threats

  B. A standard to score vulnerabilities

  C. A standard maintained by OASIS

  D. A standard for identifying vulnerabilities to make it easier to share data across tools, vulnerability repositories, and security services

  Correct Answer: D

• Question 1127:

  Which of the following is true when describing threat intelligence?

  A. Threat intelligence's primary purpose is to make money by exploiting threats.

  B. Threat intelligence's primary purpose is to inform business decisions regarding the risks and implications associated with threats.

  C. With threat intelligence, threat actors can become more efficient to carry out attacks.

  D. Threat intelligence is too difficult to obtain.

  Correct Answer: B

• Question 1128:

  Which of the following is an open source feed for threat data?

  A. Cyber Squad ThreatConnect

  B. BAE Detica CyberReveal

  C. MITRE CRITs

  D. Cisco AMP Threat Grid

  Correct Answer: C

• Question 1129:

  What is the Common Vulnerability Scoring System (CVSS)?

  A. A scoring system for exploits.

  B. A tool to automatically mitigate vulnerabilities.

  C. A scoring method that conveys vulnerability severity and helps determine the urgency and priority of response.

  D. A vulnerability-mitigation risk analysis tool.

  Correct Answer: C

• Question 1130:

  Which of the following planes is important to understand for defense in depth?

  A. Management plane

  B. Control plane

  C. User/data plane

  D. Services plane

  Correct Answer: ABCD