Cisco Cisco Certified CyberOps Associate 210-255 Questions & Answers

• Question 201:

  Which source provides reports of vulnerabilities in software and hardware to a Security Operations Center?

  A. Analysis Center

  B. National CSIRT

  C. Internal CSIRT

  D. Physical Security

  Correct Answer: C

• Question 202:

  Refer to the exhibit. What can be determined from this ping result?

  

  A. The public IP address of cisco.com is 2001:420:1101:1::a.

  B. The Cisco.com website is down.

  C. The Cisco.com website is responding with an internal IP.

  D. The public IP address of cisco.com is an IPv4 address.

  Correct Answer: A

• Question 203:

  Which statement about threat actors is true?

  A. They are any company assets that are threatened.

  B. They are any assets that are threatened.

  C. They are perpetrators of attacks.

  D. They are victims of attacks.

  Correct Answer: C

• Question 204:

  Which data element must be protected with regards to PCI?

  A. past health condition

  B. geographic location

  C. full name / full account number

  D. recent payment amount

  Correct Answer: C

• Question 205:

  What mechanism does the Linux operating system provide to control access to files?

  A. privileges required

  B. user interaction

  C. file permissions

  D. access complexity

  Correct Answer: C

• Question 206:

  Which string matches the regular expression r(ege)+x?

  A. rx

  B. regeegex

  C. r(ege)x

  D. rege+x

  Correct Answer: B

• Question 207:

  Which regular expression matches "color" and "colour"?

  A. col[0-9]+our

  B. colo?ur

  C. colou?r

  D. ]a-z]{7}

  Correct Answer: C

• Question 208:

  Which kind of evidence can be considered most reliable to arrive at an analytical assertion?

  A. direct

  B. corroborative

  C. indirect

  D. circumstantial

  E. textual

  Correct Answer: A

• Question 209:

  You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new php file on the webserver. Which category does this event fall under as defined in the Diamond Model of Intrusion?

  A. delivery

  B. reconnaissance

  C. action on objectives

  D. installation

  E. exploitation

  Correct Answer: D

• Question 210:

  Which option is a misuse variety per VERIS enumerations?

  A. snooping

  B. hacking

  C. theft

  D. assault

  Correct Answer: B