Cisco Cisco Certifications 210-255 Questions & Answers

• Question 151:

  Which of the following is one of the main goals of the CSIRT?

  A. To configure the organization's firewalls

  B. To monitor the organization's IPS devices

  C. To minimize and control the damage associated with incidents, provide guidance for mitigation, and work to prevent future incidents

  D. To hire security professionals who will be part of the InfoSec team of the organization.

  Correct Answer: C

• Question 152:

  Which of the following are core responsibilities of a national CSIRT and CERT?

  A. Provide solutions for bug bounties

  B. Protect their citizens by providing security vulnerability information, security awareness training, best practices, and other information

  C. Provide vulnerability brokering to vendors within a country

  D. Create regulations around cybersecurity within the country

  Correct Answer: B

• Question 153:

  What is accomplished in the identification phase of incident handling?

  A. determining the responsible user

  B. identifying source and destination IP addresses

  C. defining the limits of your authority related to a security event

  D. determining that a security event has occurred

  Correct Answer: D

• Question 154:

  Which data type is protected under the PCI compliance framework?

  A. credit card type

  B. primary account number

  C. health conditions

  D. provision of individual care

  Correct Answer: B

• Question 155:

  Which option is generated when a file is run through an algorithm and generates a string specific to the contents of that file?

  A. URL

  B. hash

  C. IP address

  D. destination port

  Correct Answer: B

• Question 156:

  Which two HTTP header fields relate to intrusion analysis? (Choose two).

  A. user-agent

  B. host

  C. connection

  D. language

  E. handshake type

  Correct Answer: AB

• Question 157:

  Which component of the NIST SP800-61 r2 incident handling strategy reviews data?

  A. preparation

  B. detection and analysis

  C. containment, eradication, and recovery

  D. post-incident analysis

  Correct Answer: D

• Question 158:

  Which option is a misuse variety per VERIS enumerations?

  A. snooping

  B. hacking

  C. theft

  D. assault

  Correct Answer: B

• Question 159:

  From a security perspective, why is it important to employ a clock synchronization protocol on a network?

  A. so that everyone knows the local time

  B. to ensure employees adhere to work schedule

  C. to construct an accurate timeline of events when responding to an incident

  D. to guarantee that updates are pushed out according to schedule

  Correct Answer: C

• Question 160:

  Which stakeholder group is responsible for containment, eradication, and recovery in incident handling?

  A. facilitators

  B. practitioners

  C. leaders and managers

  D. decision makers

  Correct Answer: C