Cisco Cisco Certifications 210-255 Questions & Answers

• Question 101:

  Which CVSS metric describes the conditions that are beyond the attacker's control that must exist to exploit the vulnerability?

  A. User interaction

  B. Attack vector

  C. attack complexity

  D. privileges required

  Correct Answer: C

• Question 102:

  How is confidentiality defined in the CVSS v3.0 framework?

  A. confidentiality of the information resource managed by person due to an unsuccessfully exploited vulnerability

  B. confidentiality of the information resource managed by a person due to a successfully vulnerability

  C. confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability

  D. confidentiality of the information resource managed by a software component due to an unsuccessfully exploited vulnerability

  Correct Answer: C

• Question 103:

  Which type of analysis shows what the outcome is as well how likely each outcome is?

  A. exploratory

  B. descriptive

  C. probabilistic

  D. deterministic

  Correct Answer: D

• Question 104:

  Which purpose of data mapping is true?

  A. Visualize data.

  B. Find extra vulnerabilities.

  C. Discover the identities of attackers

  D. Check that data is correct.

  Correct Answer: D

• Question 105:

  Which value in profiling servers in a system is true?

  A. it can identify when network performance has decreased

  B. it can identify servers that have been exploited

  C. it can identify when network ports have been connected

  D. it can protect the address space of critical hosts.

  Correct Answer: B

• Question 106:

  Employees are allowed access to internal websites. An employee connects to an internal website and IDS reports it as malicious behavior. What is this example of?

  A. true positive

  B. false negative

  C. false positive

  D. true negative

  Correct Answer: C

• Question 107:

  According to NIST-SP800-61R2, which option should be contained in the issue tracking system?

  A. incidents related to the current incident

  B. incident unrelated to the current incident

  C. actions taken by nonincident handlers

  D. latest public virus signatures

  Correct Answer: A

• Question 108:

  Which two potions are the primary 5-tuple components? (Choose two)

  A. destination IP address

  B. header length

  C. sequence number

  D. checksum

  E. source IP address

  Correct Answer: AE

• Question 109:

  The united State CERT provides cybersecurity protection to Federal, civilian, and executive branch agencies through intrusion detection and prevention capabilities. Which type of incident response team is this an example of?

  A. Federal PSIRT

  B. National PSIRT

  C. National CSIRT

  D. Federal CSIRT

  Correct Answer: C

• Question 110:

  Which expression creates a filter on a host IP address or name?

  A. [src|dst] host

  B. [tcp|udp] [src|dst] port

  C. ether [src|dst] host

  D. gateway host

  Correct Answer: A