Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 111:

  Which of the following is not true about listening ports?

  A. A listening port is a port held open by a running application in order to accept inbound connections.
  B. Seeing traffic from a known port will identify the associated service.
  C. Listening ports use values that can range between 1 and 65535.
  D. TCP port 80 is commonly known for Internet traffic.
  B. Seeing traffic from a known port will identify the associated service.

• Question 112:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop the items from the left onto the correct 5-tuple on the right.

  Select and Place:

  

  

• Question 113:

  What is Data mapping used for? (Choose two)

  A. data accuracy (integrity)
  B. data availability
  C. data normalization
  D. data confidentiality
  E. data visualisation
  A. data accuracy (integrity)
  E. data visualisation

• Question 114:

  What does the CSIRT incident response provider usually do?

  A. provide incident handling services to their parent organization.
  B. provide incident handling services to a country
  C. coordinate and facilitate the handling of incidents across various CSIRTs
  D. focus on synthesizing data from various sources to determine trends and patterns in incident activity
  E. handle reports of vulnerabilities in their software or hardware products
  F. offer incident handling services as a for-fee service to other organizations
  D. focus on synthesizing data from various sources to determine trends and patterns in incident activity

• Question 115:

  Which of the following is one of the most used Linux file systems that has several improvements over its predecessors and that supports journaling?

  A. NTFS
  B. exFAT
  C. Ext5
  D. Ext4
  D. Ext4

• Question 116:

  Where do you navigate in Wireshark to download files?

  A. File > Export text
  B. File > Export Binaries
  C. File > Export Files
  D. File > Export Objects
  D. File > Export Objects

• Question 117:

  Which of the following is not an example of the VERIS main schema categories?

  A. Incident tracking
  B. Victim demographics
  C. Incident descriptions
  D. Incident forensics ID
  D. Incident forensics ID

• Question 118:

  Which filter shows only SMTP and ICMP traffic on Wireshark?

  A. tcp.eq 25 or icmp
  B. tcp.port eq 25 or icmp
  C. port eq 25 and icmp
  D. tcp.port eq 25 also icmp
  B. tcp.port eq 25 or icmp

• Question 119:

  What is accomplished in the identification phase of incident handling?

  A. determining the responsible user
  B. identifying source and destination IP addresses
  C. defining the limits of your authority related to a security event
  D. determining that a security event has occurred
  D. determining that a security event has occurred

• Question 120:

  A user on your network receives an email in their mailbox that contains a malicious attachment. There is no indication that the file was run. Which category as defined in the Diamond Model of Intrusion does this activity fall under?

  A. reconnaissance
  B. weaponization
  C. delivery
  D. installation
  C. delivery