210-255 Practice Questions

According to NIST SP800-86, which action describes volatile data collection?

Which statement about the collected evidence data when performing digital forensics is true?

What are the metric values for confidentiality impact in the CVSS v3.0 framework?

Which file system has 32 bits assigned to the address clusters of the allocation table?

Which example of a precursor is true?

You have a video of a suspect entering a data center that was captured on the same that files in the same data center were transferred to a computer. Which type of is this?

Which file system has 32 assigned to the address cluster of the allocation table?

Which technology is the leading industry approach used to automatically enforce NAC?

Refer to the exhibit. Which host is likely connecting to a malicious site?

Which HTTP header field is usually used in forensics to identify the type of browser used?

Which Cyber Kill Model category does attacking vulnerability belong to?

Which CVSS metric describes the conditions that are beyond the attacker's control that must be exist to exploit the vulnerability?

Which Linux tile system supports journaling and an unlimited number of sub directories?

Who is responsible for initially analyzing an incident to determine what has happened?

Which regex matches on all lowercase letters only?

Where do you navigate in Wireshark to download files?

Which description of deterministic analysis is true?

Which incident handling phase contains evidence gathering and handling?

Which filter shows only SMTP and ICMP traffic on Wireshark?

Refer to the exhibit. Which event is represented by this configuration?

Which CVSS Attach Vector metric value means that the vulnerable component is not bound to the network stack and the path of the attacker is via read/write/execute capabilities?

Refer to the exhibit. What device is this taken from?

Which concept is used to understand instances of the same cybersecurity event occurring over the course of a few weeks that could be linked together through multiple illustrations...

Refer to the exhibit. Which item is depicted in this output?

How do you verify that one of your hosts is potentially compromised based on their communication destinations?

Which option is missing a malware variety per VERIS enumerations?

Refer to the exhibit. What does the output indicate about the server with IP address 172.18.104.139?

Which compliance framework applies to safeguarding a patient prescription list?

You have identified a malicious file in a sandbox analysis tool. Which piece of file information from the analysis is needed to search for additional downloads of this file by othe...

Which two compliance frameworks require that data be encrypted when it is transmitted over a public network? (Choose two.)

Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

Which two elements are used for profiling a network? (Choose two.)

What do the Security Intelligence Events within the FMC allow an administrator to do?

Which stakeholder is responsible for coordinating incident response among various business units, minimizing damage, and reporting to regulatory agencies?

Refer to the exhibit. Which technology generates this log?

Which expression allows you to filter on network numbers?

Which type of analysis is done when all facts are available?

Which command filters a port?

According to NIST-SP800-61R2, why is it important to keep clocks synchronized?

Refer to the exhibit. Which event is occurring?

Which two goals of data normalization are true? (Choose two.)

Which description of probabilistic analysis is true?

What can be addressed when using retrospective security techniques?