Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 21:

  What is missing from the data correlated by using security intelligence?

  A. security intelligence categories
  B. time stamps of data transmission at the frame level
  C. ports
  D. time stamps of data transmission at the packet level
  B. time stamps of data transmission at the frame level

• Question 22:

  Which of the following is the team that handles the investigation, resolution, and disclosure of security vulnerabilities in vendor products and services?

  A. CSIRT
  B. ICASI
  C. USIRP
  D. PSIRT
  D. PSIRT

• Question 23:

  Which command can be used to find open ports on a system?

  A. netstat -a
  B. netstat -l
  C. netstat -v
  D. netstat -g
  B. netstat -l

• Question 24:

  Which of the following are not components of the 5-tuple of a flow in NetFlow? (Select all that apply.)

  A. Source IP address
  B. Flow record ID
  C. Gateway
  D. Source port
  E. Destination port
  B. Flow record ID
  C. Gateway

• Question 25:

  Refer to exhibit. Which option is the logical source device for these events?

  

  A. web server
  B. NetFlow collector
  C. proxy server
  D. IDS/IPS
  D. IDS/IPS

• Question 26:

  Refer to the exhibit. We have performed a malware detection on the Cisco website. Which statement about the result is true?

  

  A. The website has been marked benign on all 68 checks.
  B. The threat detection needs to run again.
  C. The website has 68 open threats.
  D. The website has been marked benign on 0 checks.
  A. The website has been marked benign on all 68 checks.

• Question 27:

  Which option is a misuse variety per VERIS enumerations?

  A. snooping
  B. hacking
  C. theft
  D. assault
  B. hacking

• Question 28:

  Which event artifact can be used to identify HTTP GET requests for a specific file?

  A. HTTP status code
  B. TCP ACK
  C. destination IP
  D. URI
  D. URI

• Question 29:

  Which statement about the collected evidence data when performing digital forensics is true?

  A. It must be preserved and its integrity verified.
  B. It must be copied to external storage media and immediately distributed to the CISO.
  C. It must be deleted as soon as possible due to PCI compliance.
  D. It must be stored in a forensics lab only by the data custodian.
  A. It must be preserved and its integrity verified.

• Question 30:

  According to NIST-SP800-61R2, which option should be contained in the issue tracking system?

  A. incidents related to the current incident
  B. incident unrelated to the current incident
  C. actions taken by nonincident handlers
  D. latest public virus signatures
  A. incidents related to the current incident