Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 101:

  Refer to the exhibit.

  

  Which event is occurring?

  A. A URL is being evaluated to see if it has a malicious binary.
  B. A binary on device cuckoo1 is being submitted for evaluation.
  C. A binary named “submit” is running on cuckoo1.
  D. A binary is being submitted to run on device cuckoo1.
  D. A binary is being submitted to run on device cuckoo1.

• Question 102:

  Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

  A. SFlow
  B. NetFlow
  C. NFlow
  D. IPFIX
  D. IPFIX

• Question 103:

  Which of the following is typically a responsibility of a PSIRT (Product SIRT)?

  A. Configure the organization's firewall
  B. Monitor security logs
  C. Investigate security incidents in a SOC
  D. Disclosure vulnerabilities in the organization's products and services
  D. Disclosure vulnerabilities in the organization's products and services

• Question 104:

  According to NIST SP800-86, which action describes volatile data collection?

  A. collection of data before a system reboot
  B. collection of data that contains malware
  C. collection of data during a system reboot
  D. collection of data after a system reboot
  A. collection of data before a system reboot

• Question 105:

  Which CVSSv3 metric value increases when attacks consume network bandwidth, processor cycles, or disk space?

  A. confidentiality
  B. integrity
  C. availability
  D. complexity
  C. availability

• Question 106:

  According to NIST 86, which action describes the volatile data collection?

  A. Collect data before rebooting
  B. Collect data while rebooting
  C. Collect data after rebooting
  D. Collect data that contains malware
  A. Collect data before rebooting

• Question 107:

  Which analyzing technique describe the outcome as well as how likely each outcome is?

  A. deterministic
  B. exploratory
  C. probabilistic
  D. descriptive
  C. probabilistic

• Question 108:

  What can be addressed when using retrospective security techniques?

  A. why the malware is still in our network
  B. if the affected host needs a software update
  C. origin of the malware
  D. if the affected system needs replacement
  A. why the malware is still in our network

• Question 109:

  Which regex matches on all lowercase letters only?

  A. [a-z]+
  B. a*z+
  C. [a-z]+
  D. a-z+
  C. [a-z]+

• Question 110:

  Which of the following can be identified by correlating DNS intelligence and other security events? (Choose two.)

  A. Communication to CnC servers
  B. Configuration issues
  C. Malicious domains based on reputation
  D. Routing problems
  A. Communication to CnC servers
  C. Malicious domains based on reputation