Cisco Cisco Certified CyberOps Associate 210-255 Questions & Answers

• Question 211:

  In the context of incident handling phases, which two activities fall under scoping? (Choose two.)

  A. determining the number of attackers that are associated with a security incident

  B. ascertaining the number and types of vulnerabilities on your network

  C. identifying the extent that a security incident is impacting protected resources on the network

  D. determining what and how much data may have been affected

  E. identifying the attackers that are associated with a security incident

  Correct Answer: CD

• Question 212:

  Which option can be addressed when using retrospective security techniques?

  A. if the affected host needs a software update

  B. how the malware entered our network

  C. why the malware is still in our network

  D. if the affected system needs replacement

  Correct Answer: B

• Question 213:

  Which CVSSv3 Attack Vector metric value requires the attacker to physically touch or manipulate the vulnerable component?

  A. local

  B. physical

  C. network

  D. adjacent

  Correct Answer: B

• Question 214:

  Drag and drop the type of evidence from the left onto the correct descnption(s) of that evidence on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 215:

  Drag and drop the elements of incident handling from the left into the correct order on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 216:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop the element name from the left onto the correct piece of the PCAP file on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 217:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop the element name from the left onto the correct piece of the NetFlow v5r record from a security event on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 218:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop the items from the left onto the correct 5-tuple on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 219:

  Drag and Drop

  Built inbound TCP connection 463879 for outside: (25.238.89.53/14846) to DMZ: WWW_Server/80 (198.52.1.50/80)

  Select and Place:

  

  Correct Answer:

  

• Question 220:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop elements from the log onto the correct 5-tuple category on the right.

  Select and Place:

  

  Correct Answer: