Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 11:

  Which identifies both the source and destination location?

  A. IP address
  B. URL
  C. ports
  D. MAC address
  A. IP address

• Question 12:

  What are the metric values of the confidentiality based on the CVSS framework?

  A. Low-high
  B. Low -Medium-high
  C. High-Low-none
  C. High-Low-none

• Question 13:

  How do you enforce network access control automatically?

  A. IGMP
  B. SNMP
  C. 802.1X
  D. Port Security
  C. 802.1X

• Question 14:

  What are the metric values for confidentiality impact in the CVSS v3.0 framework?

  A. high, low
  B. high, low, none
  C. high, medium, none
  D. open, closed, obsolete
  B. high, low, none

• Question 15:

  You have run a suspicious file in a sandbox analysis tool to see what the file does. The analysis report shows that outbound callouts were made post infection. Which two pieces of information from the analysis report are needed or required to investigate the callouts? (Choose two.)

  A. file size
  B. domain names
  C. dropped files
  D. signatures
  E. host IP addresses
  B. domain names
  E. host IP addresses

• Question 16:

  During which phase of the forensic process are tools and techniques used to extract the relevant information from the collective data?

  A. examination
  B. reporting
  C. collection
  D. investigation
  A. examination

• Question 17:

  Which concept is used to understand instances of the same cybersecurity event occurring over the course of a few weeks that could be linked together through multiple illustrations and then linked back to the same adversary?

  A. threat model
  B. intrusion threat intelligence model
  C. compliance and Intrusion model
  D. diamond model of intrusion
  C. compliance and Intrusion model

• Question 18:

  Which two HTTP header fields relate to intrusion analysis? (Choose two).

  A. user-agent
  B. host
  C. connection
  D. language
  E. handshake type
  A. user-agent
  B. host

• Question 19:

  Which technology generates events utilizing proxy logs?

  A. Firepower
  B. Email Security Appliance
  C. Stealthwatch
  D. Web Security Appliance
  D. Web Security Appliance

• Question 20:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop elements from the log onto the correct 5-tuple category on the right.

  Select and Place: