Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 131:

  Which of the following file systems is more secure, scalable, and advanced?

  A. FAT32
  B. FAT64
  C. uFAT
  D. NTFS
  D. NTFS

• Question 132:

  Which option has a drastic impact on network traffic because it can cause legitimate traffic to be blocked?

  A. true positive
  B. true negative
  C. false positive
  D. false negative
  C. false positive

• Question 133:

  What information from HTTP logs can be used to find a threat actor?

  A. referer
  B. IP address
  C. user-agent
  D. URL
  B. IP address

• Question 134:

  Which compliance framework applies to safeguarding a patient prescription list?

  A. PCI
  B. SOX
  C. HIPAA
  D. COBIT
  C. HIPAA

• Question 135:

  Which statement about threat actors is true?

  A. They are any company assets that are threatened.
  B. They are any assets that are threatened.
  C. They are perpetrators of attacks.
  D. They are victims of attacks.
  C. They are perpetrators of attacks.

• Question 136:

  Which stakeholder group is responsible for containment, eradication, and recovery in incident handling?

  A. facilitators
  B. practitioners
  C. leaders and managers
  D. decision makers
  C. leaders and managers

• Question 137:

  Which element is included in an incident response plan?

  A. organization mission
  B. junior analyst approval
  C. day-to-day firefighting
  D. siloed approach to communications
  A. organization mission

• Question 138:

  How do you verify that one of your hosts is potentially compromised based on their communication destinations?

  A. Search the communication destinations of the host in the Talos IP and Domain Reputation Center.
  B. Analyze how much traffic the host sent and received from each IP address or domain.
  C. See if any Stealthwatch alarms were triggered for the host communicating with internal hosts.
  D. Check the Firepower appliance to see if malicious files were downloaded.
  A. Search the communication destinations of the host in the Talos IP and Domain Reputation Center.

• Question 139:

  Which of the following is true about attribution in a cybersecurity investigation?

  A. A suspect-led approach is often accepted in supreme courts.
  B. A suspect-led approach is pejorative and often biased to the disadvantage of those being investigated.
  C. A suspect-led approach is mostly used in corporate investigations.
  D. A suspect-led approach is mostly used in private investigations.
  B. A suspect-led approach is pejorative and often biased to the disadvantage of those being investigated.

• Question 140:

  What define the roadmap for implementing the incident response plan?

  A. Incident response plan
  B. Incident response policy
  C. Incident response procedures
  A. Incident response plan