Cisco 210-255 Online Practice Questions and Exam Preparation

Cisco 210-255 Online Questions & Answers

• Question 51:

  Filtering ports in wireshark?

  A. tcp.port == 80
  B. tcp port equals 80
  C. tcp.port 80
  D. port 80
  A. tcp.port == 80

• Question 52:

  Which of the following is typically a responsibility of a PSIRT?

  A. Configure the organization's firewall
  B. Monitor security logs
  C. Investigate security incidents in a security operations center (SOC)
  D. Disclose vulnerabilities in the organization's products and services
  D. Disclose vulnerabilities in the organization's products and services

• Question 53:

  An offline audit log contains the source IP address of a session suspected to have exploited a vulnerability resulting in system compromise. Which kind of evidence is this IP address?

  A. indirect evidence
  B. best evidence
  C. forensic evidence
  D. corroborative evidence
  D. corroborative evidence

• Question 54:

  DRAG DROP

  Refer to exhibit. Drag and drop the elements from the left onto the correct 5-tuples on the right.

  

  Select and Place:

  

  

• Question 55:

  Which description of probabilistic analysis is true?

  A. probable proof of a user's identity
  B. lack of proof of a user's identity
  C. definitive proof of a user's identity
  D. false proof of a user's identity
  A. probable proof of a user's identity

• Question 56:

  Which function does an internal CSIRT provide?

  A. incident handling services across various CSIRTs
  B. incident handling services for a country's government
  C. incident handling services for a parent organization
  D. incident handling services as a service for other organization
  C. incident handling services for a parent organization

• Question 57:

  In the context of incident handling phases, which two activities fall under scoping? (Choose two.)

  A. determining the number of attackers that are associated with a security incident
  B. ascertaining the number and types of vulnerabilities on your network
  C. identifying the extent that a security incident is impacting protected resources on the network
  D. determining what and how much data may have been affected
  E. identifying the attackers that are associated with a security incident
  C. identifying the extent that a security incident is impacting protected resources on the network
  D. determining what and how much data may have been affected

• Question 58:

  Which tool helps security administrators identify threats in their network?

  A. Cisco Cloudlock
  B. Cisco Email Security
  C. Cisco Umbrella
  D. Security Threat Intelligence
  D. Security Threat Intelligence

• Question 59:

  Which command filters a port?

  A. tcp.port equals 25
  B. tcp.port is 25
  C. tcp.port != 25
  D. !tcp.port==25
  D. !tcp.port==25

• Question 60:

  DRAG DROP

  

  Refer to the exhibit. Drag and drop the element name from the left onto the correct piece of the NetFlow v5r record from a security event on the right.

  Select and Place: