Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 1:

  Which process is being utilized when IPS events are removed to improve data integrity?

  A. data normalization
  B. data availability
  C. data protection
  D. data signature
  A. data normalization

• Question 2:

  When performing threat hunting against a DNS server, which traffic toward the affected domain is considered a starting point?

  A. HTTPS traffic
  B. TCP traffic
  C. HTTP traffic
  D. UDP traffic
  D. UDP traffic

• Question 3:

  Drag and drop the type of evidence from the left onto the correct descnption(s) of that evidence on the right.

  Select and Place:

  

  

• Question 4:

  Which two potions are the primary 5-tuple components? (Choose two)

  A. destination IP address
  B. header length
  C. sequence number
  D. checksum
  E. source IP address
  A. destination IP address
  E. source IP address

• Question 5:

  Which incident handling phase is focused on minimizing the impact of the incident?

  A. reporting
  B. remediation
  C. containment
  D. scoping
  C. containment

• Question 6:

  Which of the following are examples of some of the responsibilities of a corporate CSIRT and the policies it helps create? (Select all that apply.)

  A. Scanning vendor customer networks
  B. Incident classification and handling
  C. Information classification and protection
  D. Information dissemination
  E. Record retentions and destruction
  B. Incident classification and handling
  C. Information classification and protection
  D. Information dissemination

• Question 7:

  You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new php file on the webserver. Which category does this event fall under as defined in the Diamond Model of Intrusion?

  A. delivery
  B. reconnaissance
  C. action on objectives
  D. installation
  E. exploitation
  D. installation

• Question 8:

  What is the process of remediation the system from attack so that responsible threat actor can be revealed?

  A. Validating the Attacking Host's IP Address
  B. Researching the Attacking Host through Search Engines.
  C. Using Incident Databases.
  D. Monitoring Possible Attacker Communication Channels.
  C. Using Incident Databases.

• Question 9:

  Which type of analysis shows what the outcome is as well how likely each outcome is?

  A. exploratory
  B. descriptive
  C. probabilistic
  D. deterministic
  D. deterministic

• Question 10:

  What are two security goals of data normalization? (Choose two.)

  A. purge redundant data
  B. reduce size of data on disk
  C. increase data exposure
  D. maintain data integrity
  E. create data for abstraction
  A. purge redundant data
  D. maintain data integrity