Cisco Cisco Certifications 210-255 Questions & Answers

• Question 111:

  Which function does an internal CSIRT provide?

  A. incident handling services across various CSIRTs

  B. incident handling services for a country's government

  C. incident handling services for a parent organization

  D. incident handling services as a service for other organization

  Correct Answer: C

• Question 112:

  Which option is unnecessary for determining the appropriate containment strategy according to NIST.SP800-61 r2?

  A. effectiveness of the strategy

  B. time and resource needed to implement the strategy

  C. need for evidence preservation

  D. attack vector used to compromise the system

  Correct Answer: D

• Question 113:

  Which type verification typically consists of using tools to compute the message digest of the original and copies data, then comparing the digests to make sure that they are the same?

  A. evidence collection order

  B. data integrity

  C. data preservation

  D. volatile data collection

  Correct Answer: B

• Question 114:

  What is a common artifact used to uniquely identify a detected file?

  A. file size

  B. file extension

  C. file timestamp

  D. file hash

  Correct Answer: D

• Question 115:

  Which two useful pieces of information can be collected from the IPv4 protocol header? (Choose two.)

  A. UDP port which the traffic is destined

  B. source IP address of the packet

  C. UDP port from which the traffic is sourced

  D. TCP port from which the traffic was source

  E. destination IP address of the packet

  Correct Answer: BE

• Question 116:

  Refer to exhibit. Which option is the logical source device for these events?

  

  A. web server

  B. NetFlow collector

  C. proxy server

  D. IDS/IPS

  Correct Answer: D

• Question 117:

  Which two potions about deterministic and probabilistic analysis are true? (Choose two.)

  A. probabilistic analysis uses data known beforehand and deterministic analysis is based off assumptions.

  B. Deterministic analysis uses data known beforehand and probabilistic analysis based off of assumptions.

  C. Deterministic analysis is based off of assumptions

  D. Probabilistic analysis result in a result that is definitive.

  E. probabilistic analysis results in a result that is not definitive.

  Correct Answer: BE

• Question 118:

  What is Data mapping used for? (Choose two)

  A. data accuracy (integrity)

  B. data availability

  C. data normalization

  D. data confidentiality

  E. data visualisation

  Correct Answer: AE

• Question 119:

  Which type of intrusion event is an attacker retrieving the robots. txt file from target site?

  A. exploitation

  B. weaponization

  C. scanning

  D. reconnaissance

  Correct Answer: D

• Question 120:

  Which of the following is not an example of the VERIS main schema categories?

  A. Incident tracking

  B. Victim demographics

  C. Incident descriptions

  D. Incident forensics ID

  Correct Answer: D