Cisco Cisco Certifications 210-255 Questions & Answers

• Question 71:

  Providing cybersecurity protection to Federal civilian executive branch agencies through intrusion detection and prevention capabilities. Which team?

  A. Federal CSIRT

  B. Federal PSIRT

  C. National CSIRT

  D. National PSIRT

  Correct Answer: C

• Question 72:

  What is the definition of availability accord to CVSSv3 framework?

  A. This metric measures the impact to the confidentiality of the information resources that are managed by a software component due to a successfully exploited vulnerability.

  B. This metric measures the impact to integrity of a successfully exploited vulnerability. Integrity refers to the trustworthiness and veracity of information.

  C. This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability.

  Correct Answer: C

• Question 73:

  What is the definition of integrity according to CVSSv3 framework?

  A. This metric measures the impact to the confidentiality of the information resources that are managed by a software component due to a successfully exploited vulnerability.

  B. This metric measures the impact to integrity of a successfully exploited vulnerability. Integrity refers to the trustworthiness and veracity of information.

  C. This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability.

  Correct Answer: B

• Question 74:

  Which of the following is one of the most used Linux file systems that has several improvements over its predecessors and that supports journaling?

  A. NTFS

  B. exFAT

  C. Ext5

  D. Ext4

  Correct Answer: D

• Question 75:

  attacker using robots.txt is under which category?

  A. Reconnaissance

  B. Weaponization

  C. Delivery

  D. Exploitation

  E. Installation

  F. Command and control (C2)

  G. Actions on objectives

  Correct Answer: A

• Question 76:

  According to NIST what option(s) should be contained in issue tracking system?

  A. The current status of the incident

  B. A summary of the incident

  C. Indicators related to the incident

  D. Other incidents related to this incident

  E. Actions taken by all incident handlers on this incident

  F. Chain of custody, if applicable

  G. Impact assessments related to the incident

  H. Contact information for other involved parties (e.g., system owners, system administrators)

  I. A list of evidence gathered during the incident investigation

  J. Comments from incident handlers

  K. Next steps to be taken (e.g., rebuild the host, upgrade an application).

  Correct Answer: D

• Question 77:

  Which two statements correctly describe the victim demographics section of the VERIS schema? (Choose two.)

  A. The victim demographics section describes but does not identify the organization that is affected by the incident.

  B. The victim demographics section compares different types of organizations or departments within a single organization.

  C. The victim demographics section captures general information about the incident.

  D. The victim demographics section uses geolocation data to identify the organization name of the victim and the threat actor.

  Correct Answer: AB

• Question 78:

  To which category do attributes belong within the VERIS schema ?

  A. victim demographics

  B. incident tracking

  C. Discovery and response

  D. incident description

  Correct Answer: D

• Question 79:

  Which Linux file system allows unlimited folder subdirectory structure

  A. ext4

  B. ext3

  C. ext2

  D. NTFS

  Correct Answer: A

• Question 80:

  Which technology is the leading industry approach used to automatically enforce NAC?

  A. IGMP

  B. SNMP

  C. 802.1X

  D. Port Security

  Correct Answer: C