Cisco Cisco Certifications 210-255 Questions & Answers

• Question 91:

  Which example of a precursor is true?

  A. A notification that a host is infected with malware.

  B. An admin finds their password has been changed.

  C. A log indicating a port scan was run against a host

  D. A device configuration changed from the baseline without an audit log entry.

  Correct Answer: C

• Question 92:

  You have a video of suspect entering your office the day your data has being stolen?

  A. Direct evidence

  B. Indirect

  C. Circumstantial

  Correct Answer: B

• Question 93:

  What is the process of remediation the network and systems and/or reconstructing so the responsible threat actor can be revealed?

  A. Data analysis

  B. Assets distribution

  C. Evidence collection

  D. Threat actor distribution

  Correct Answer: D

• Question 94:

  Which statement about collecting data evidence when performing digital forensics is true?

  A. Allowing unrestricted access to impacted devices

  B. Not allowing items of evidence to be physically touch

  C. Powering off the device after collecting the data

  D. It must be preserved and integrity checked

  Correct Answer: D

• Question 95:

  Which analyzing technique describe the outcome as well as how likely each outcome is?

  A. deterministic

  B. exploratory

  C. probabilistic

  D. descriptive

  Correct Answer: C

• Question 96:

  According to NIST 86, which action describes the volatile data collection?

  A. Collect data before rebooting

  B. Collect data while rebooting

  C. Collect data after rebooting

  D. Collect data that contains malware

  Correct Answer: A

• Question 97:

  Which signature type results in a legitime alert been dismissed?

  A. True negative

  B. False negative

  C. True Positive

  D. False Positive

  Correct Answer: B

• Question 98:

  Which incident handling is focused on minimizing the impact of an incident?

  A. Scoping

  B. Reporting

  C. Containment

  D. Eradication

  Correct Answer: C

• Question 99:

  What is the common artifact that is used to uniquely identify a detected file?

  A. Hash

  B. Timestamp

  C. File size

  Correct Answer: A

• Question 100:

  What are the metric values of the confidentiality based on the CVSS framework?

  A. Low-high

  B. Low -Medium-high

  C. High-Low-none

  Correct Answer: C