Cisco Cisco Certified CyberOps Associate 210-255 Questions & Answers

• Question 41:

  Which filter shows only SMTP and ICMP traffic on Wireshark?

  A. tcp.eq 25 or icmp

  B. tcp.port eq 25 or icmp

  C. port eq 25 and icmp

  D. tcp.port eq 25 also icmp

  Correct Answer: B

  Reference: https://wiki.wireshark.org/DisplayFilters

• Question 42:

  Where do you navigate in Wireshark to download files?

  A. File > Export text

  B. File > Export Binaries

  C. File > Export Files

  D. File > Export Objects

  Correct Answer: D

• Question 43:

  Which description of deterministic analysis is true?

  A. probable proof of a user's identity

  B. lack of proof of a user's identity

  C. definitive proof of a user's identity

  D. false proof of a user's identity

  Correct Answer: C

• Question 44:

  Who is responsible for initially analyzing an incident to determine what has happened?

  A. IT director

  B. CIO

  C. server administrator

  D. incident handler

  Correct Answer: D

• Question 45:

  Which regex matches on all lowercase letters only?

  A. [a-z]+

  B. a*z+

  C. [a-z]+

  D. a-z+

  Correct Answer: C

• Question 46:

  Which Linux tile system supports journaling and an unlimited number of sub directories?

  A. EXT4

  B. EXT2

  C. EXT3

  D. TFS

  Correct Answer: A

• Question 47:

  What define the roadmap for implementing the incident response capability?

  A. incident response plan

  B. incident response procedure

  C. incident handling guide

  D. incident response policy

  Correct Answer: A

• Question 48:

  How do you enforce network access control automatically?

  A. IGMP

  B. SNMP

  C. 802.1X

  D. Port Security

  Correct Answer: C

• Question 49:

  Which netstat command show ports? (Choose two)

  A. netstat a

  B. netstat -l

  C. netstat -v

  D. netstat -g

  Correct Answer: AB

• Question 50:

  Which CVSSv3 metric captures the level of access that is required for a successful attack?

  A. attack vector

  B. attack complexity

  C. privileges required

  D. user interaction

  Correct Answer: C

  Privileges Required The new metric, Privileges Required, replaces the Authentication metric of v2.0. Instead of measuring the number of times an attacker must separately authenticate to a system, Privileges Required captures the level of access required for a successful attack. Specifically, the metric values High, Low, and None refilect the privileges required by an attacker in order to explogt the vulnerability.