Cisco Cisco Certified CyberOps Associate 210-255 Questions & Answers

• Question 21:

  According to NIST-SP800-61R2, why is it important to keep clocks synchronized?

  A. event correlation

  B. to link with other countries easily

  C. to not lose track of time

  D. to measure the effectiveness of an attack

  Correct Answer: A

• Question 22:

  Which type of analysis is done when all facts are available?

  A. probabilistic

  B. deterministic

  C. static

  D. dynamic

  Correct Answer: B

• Question 23:

  Refer to the exhibit.

  

  Which technology generates this log?

  A. NetFlow

  B. IDS

  C. web proxy

  D. firewall

  Correct Answer: D

• Question 24:

  Which expression allows you to filter on network numbers?

  A. ether [src|dst] host

  B. gateway host

  C. [src|dst] net [{mask }|{len }}

  D. [tcp|udp] [src|dst] port

  Correct Answer: D

• Question 25:

  Which stakeholder is responsible for coordinating incident response among various business units, minimizing damage, and reporting to regulatory agencies?

  A. management

  B. public affairs and media relations

  C. CSIRT

  D. PSIRT

  Correct Answer: A

• Question 26:

  Which two elements are used for profiling a network? (Choose two.)

  A. total throughout

  B. session duration

  C. running processes

  D. OS fingerprint

  E. listening ports

  Correct Answer: DE

• Question 27:

  What do the Security Intelligence Events within the FMC allow an administrator to do?

  A. See if a host is connecting to a known-bad domain.

  B. Check for host-to-server traffic within your network.

  C. View any malicious files that a host has downloaded.

  D. Verify host-to-host traffic within your network.

  Correct Answer: A

• Question 28:

  Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

  A. SFlow

  B. NetFlow

  C. NFlow

  D. IPFIX

  Correct Answer: D

• Question 29:

  Which two compliance frameworks require that data be encrypted when it is transmitted over a public network? (Choose two.)

  A. PCI

  B. GLBA

  C. HIPAA

  D. SOX

  E. COBIT

  Correct Answer: AC

• Question 30:

  Which compliance framework applies to safeguarding a patient prescription list?

  A. PCI

  B. SOX

  C. HIPAA

  D. COBIT

  Correct Answer: C