Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 41:

  In Microsoft Windows, as files are deleted the space they were allocated eventually is considered available for use by other files. This creates alternating used and unused areas of various sizes. What is this called?

  A. network file storing
  B. free space fragmentation
  C. alternate data streaming
  D. defragmentation
  B. free space fragmentation

• Question 42:

  Which two useful pieces of information can be collected from the IPv4 protocol header? (Choose two.)

  A. UDP port which the traffic is destined
  B. source IP address of the packet
  C. UDP port from which the traffic is sourced
  D. TCP port from which the traffic was source
  E. destination IP address of the packet
  B. source IP address of the packet
  E. destination IP address of the packet

• Question 43:

  Which Cyber Kill Chain Model category does attacking a vulnerability belong to?

  A. Exploitation
  B. Action on Objectives
  C. Installation
  D. Delivery
  A. Exploitation

• Question 44:

  Which of the following Linux file systems not only supports journaling but also modifies important data structures of the file system, such as the ones destined to store the file data for better performance and reliability?

  A. GRUB
  B. LILO
  C. Ext4
  D. FAT32
  C. Ext4

• Question 45:

  

  Refer to the exhibit. What device is this taken from?

  A. web proxy
  B. IDS
  C. firewall
  D. NetFlow
  C. firewall

• Question 46:

  At which stage attacking the vulnerability belongs in Cyber kill chain?

  A. Exploitation
  B. Reconnaissance
  C. Weaponization
  D. Delivery
  E. Installation
  F. Command and control (C2)
  G. Actions on objectives
  A. Exploitation

• Question 47:

  Which option creates a display filter on Wireshark on a host IP address or name?

  A. ip.address == or ip.network ==
  B. [tcp|udp] ip.[src|dst] port
  C. ip.addr == or ip.name ==
  D. ip.addr == or ip.host ==
  D. ip.addr == or ip.host ==

• Question 48:

  Which option is the process of remediating the network and systems and/or reconstructing the attack so that the responsible threat actor can be revealed?

  A. data analytics
  B. asset attribution
  C. threat actor attribution
  D. evidence collection
  A. data analytics

• Question 49:

  

  Refer to the exhibit. Which information is interesting about the HTTP GET shown?

  A. The User-Agent is Mozilla/4.0
  B. The HTTP GET is encoded
  C. timestamps
  D. The protocol is TCP
  B. The HTTP GET is encoded

• Question 50:

  Which of the following is true about journaling?

  A. The journal is the least used part of the disk, making the blocks that form part of it more prone to hardware failure.
  B. The journal is the most used part of the disk, making the blocks that form part of it less prone to hardware failure.
  C. The journal is the most used part of the disk, making the blocks that form part of it more prone to hardware failure.
  D. The journal is the least used part of the disk, making the blocks that form part of it less prone to hardware failure.
  C. The journal is the most used part of the disk, making the blocks that form part of it more prone to hardware failure.