Implementing Cisco Cybersecurity Operations (210-255) Free Practice Test

Question 1

What is the process of remediation the network and systems and/or reconstructing so the responsible threat actor can be revealed?

A. Threat actor distribution

B. Assets distribution

C. Evidence collection

D. Data analysis

Correct Answer: A

Question 2

Which technology is the leading industry approach used to automatically enforce NAC?

A. IGMP

B. SNMP

C. port security

D. 802.1x

Correct Answer: D

Question 3

Which CVSSv3 metric value increases when attacks consume network bandwidth, processor cycles, or disk space?

A. confidentiality

B. availability

C. complexity

D. integrity

Correct Answer: B

Question 4

What is the process of remediation the system from attack so that responsible threat actor can be revealed?

A. Researching the Attacking Host through Search Engines.

B. Using Incident Databases.

C. Validating the Attacking Host's IP Address

D. Monitoring Possible Attacker Communication Channels.

Correct Answer: C

Question 5

Which stakeholder group is responsible for containment, eradication, and recovery in incident handling?

A. practitioners

B. facilitators

C. leaders and managers

D. decision makers

Correct Answer: C

Question 6

Refer to exhibit. Which option is the logical source device for these events?

A. web server

B. IDS/IPS

C. proxy server

D. NetFlow collector

Correct Answer: B

Question 7

Which expression creates a filter on a host IP address or name?

A. [tcp|udp] [src|dst] port<port>

B. [src|dst] host <host host >

C. ether [src|dst] host<ehost>

D. gateway host <host>

Correct Answer: B

Question 8

Which two options can be used by a threat actor to determine the role of a server? (Choose two.)

A. tracert

B. hard drive configuration

C. applications

D. PCAP

E. running processes

Correct Answer: C,E

Question 9

What information from HTTP logs can be used to find a threat actor?

A. URL

B. user-agent

C. referer

D. IP address

Correct Answer: D

Question 10

During which phase of the forensic process are tools and techniques used to extract the relevant information from the collective data?

A. collection

B. investigation

C. reporting

D. examination

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

An organization has recently adjusted its security stance in response to online threats made by a known hacktivist group. Which term defines the initial event in the NIST SP800- 61 r2?

A. online assault

B. trigger

C. instigator

D. precursor

Correct Answer: D

Question 12

Which description of a retrospective malware detection is true?

A. You use Wireshark to identify the affected host or file.

B. You use historical information from one or more sources to identify the affected host or file.

C. You use information from a network analyzer to identify the malware source.

D. You use Wireshark to identify the malware source.

Correct Answer: B

Question 13

How do you verify that one of your hosts is potentially compromised based on their communication destinations?

A. Check the Firepower appliance to see if malicious files were downloaded.

B. Search the communication destinations of the host in the Talos IP & Domain Reputation Center.

C. Analyze how much traffic the host sent and received from each IP address or domain.

D. See if any Stealthwatch alarms were triggered for the host communicating with internal hosts.

Correct Answer: B

Welcome to TestSimulate

Cisco Implementing Cisco Cybersecurity Operations (210-255) Free Practice Test