Cisco Cisco Certifications 210-255 Questions & Answers

• Question 131:

  Which command can be used to find open ports on a system?

  A. netstat -a

  B. netstat -l

  C. netstat -v

  D. netstat -g

  Correct Answer: B

• Question 132:

  Choose the option that best describes NIST data integrity

  A. use only sha-1

  B. use only md5

  C. you must hash data and backup and compare hashes

  D. no need to hash data and backup and compare hashes

  Correct Answer: C

• Question 133:

  Which of the following are the three broad categories of cybersecurity investigations?

  A. Public, private, and individual investigations

  B. Judiciary, private, and individual investigations

  C. Public, private, and corporate investigations

  D. Government, corporate, and private investigations

  Correct Answer: A

• Question 134:

  What protocol is related to NAC?

  A. 802.1Q

  B. 802.1X

  C. 802.1E

  D. 802.1F

  Correct Answer: B

• Question 135:

  What is the process of remediation the system from attack so that responsible threat actor can be revealed?

  A. Validating the Attacking Host's IP Address

  B. Researching the Attacking Host through Search Engines.

  C. Using Incident Databases.

  D. Monitoring Possible Attacker Communication Channels.

  Correct Answer: C

• Question 136:

  What is NAC?

  A. Non-Admin Closure

  B. Network Access Control

  C. Nepal Airline Corporations

  D. Network Address Control

  Correct Answer: B

• Question 137:

  In addition to cybercrime and attacks, evidence found on a system or network may be presented in a court of law to support accusations of crime or civil action, including which of the following?

  A. Fraud, money laundering, and theft

  B. Drug-related crime

  C. Murder and acts of violence

  D. All of the above

  Correct Answer: D

• Question 138:

  Which of the following is not an example of weaponization?

  A. Connecting to a command and control server

  B. Wrapping software with a RAT

  C. Creating a backdoor in an application

  D. Developing an automated script to inject commands on a USB device

  Correct Answer: A

• Question 139:

  Which of the following has been used to evade IDS and IPS devices?

  A. SNMP

  B. HTTP

  C. TNP

  D. Fragmentation

  Correct Answer: D

• Question 140:

  Which of the following can be identified by correlating DNS intelligence and other security events? (Choose two.)

  A. Communication to CnC servers

  B. Configuration issues

  C. Malicious domains based on reputation

  D. Routing problems

  Correct Answer: AC