Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 141:

  Which CVSSv3 metric captures the level of access that is required for a successful attack?

  A. attack vector
  B. attack complexity
  C. privileges required
  D. user interaction
  C. privileges required

• Question 142:

  Which of the following is an example of a managed security offering where incident response experts monitor and respond to security alerts in a security operations center (SOC)?

  A. Cisco CloudLock
  B. Cisco's Active Threat Analytics (ATA)
  C. Cisco Managed Firepower Service
  D. Cisco Jasper
  B. Cisco's Active Threat Analytics (ATA)

• Question 143:

  Refer to the exhibit. You notice that the email volume history has been abnormally high. Which potential result is true?

  

  A. Email sent from your domain might be filtered by the recipient.
  B. Messages sent to your domain may be queued up until traffic dies down.
  C. Several hosts in your network may be compromised.
  D. Packets may be dropped due to network congestion.
  C. Several hosts in your network may be compromised.

• Question 144:

  Why do SOC analysts use 5-tuple?

  A. to identify the requirements for creating a functional network connection between two laptops
  B. to identify the requirements for creating a wireless network connection between an access point and a host
  C. to identify the requirements for creating a data center using best practices
  D. to identify the requirements for creating a secure network connection between two or more remote and local machines
  D. to identify the requirements for creating a secure network connection between two or more remote and local machines

• Question 145:

  What information is unnecessary for determining the appropriate containment strategy according to NIST SP800-61 r2?

  A. attack vector used to compromise the system
  B. effectiveness of the strategy
  C. time and resources needed to implement the strategy
  D. need for evidence preservation
  A. attack vector used to compromise the system

• Question 146:

  Which file is allocated with 32 bits?

  A. NTFS
  B. FAT32
  C. FAT
  D. EXT4
  B. FAT32

• Question 147:

  You see confidential data being exfiltrated to an IP address that is attributed to a known Advanced Persistent Threat group. Assume that this is part of a real attach and not a network misconfiguration. Which category does this event fall under as defined in the Diamond Model of Intrusion?

  A. reconnaissance
  B. weaponization
  C. delivery
  D. action on objectives
  D. action on objectives

• Question 148:

  Based on nistsp800-61R2 what are the recommended protections against malware?

  A. install software to detect malware
  B. update antivirus signature
  C. Other options
  A. install software to detect malware
  B. update antivirus signature

• Question 149:

  Which incident handling phase contains evidence gathering and handling?

  A. containment, eradication, and recovery
  B. identification
  C. post incident
  D. preparation
  C. post incident

• Question 150:

  When evidence is collected, what does NIST SP800-86 specify as a guideline to follow for the order of collection?

  A. order of volatility
  B. order of importance
  C. most difficult to access first
  D. least difficult to access first
  B. order of importance