Sign in

Free 210-255 sample questions

Real questions from the Implementing Cisco Cybersecurity Operations (SECOPS) practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 8 of 17 free sample questions.

Question 1Choose one

Refer to the exhibit. A customer reports that they cannot access your organization's website. Which option is a possible reason that the customer cannot access the website? A.The server at 10.33.1.5 is using up too much bandwidth causing a denial-of-service.B.The server at 10.67.10.5 has a virus.C.A vulnerability scanner has shown that 10.67.10.5 has been compromised.D.Web traffic sent from 10.67.10.5 has been identified as malicious by Internet sensors.

Question 2Choose one

You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new php file on the webserver. Which category does this event fall under as defined in the Diamond Model of Intrusion? A.deliveryB.reconnaissanceC.action on objectivesD.installationE.exploitation

Question 3Choose one

A security analyst is reviewing a vulnerability assessment report. One critical vulnerability has a CVSS v3.0 base score of 9.8. The vector string is: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Which of the following best describes the characteristics of this vulnerability based on the vector?

Question 4Choose 2

During a forensic investigation of a compromised Windows workstation, an analyst suspects the attacker established persistence using the Registry. Which TWO Registry keys are most commonly modified to execute malware automatically upon user login? (Select TWO)

Question 5Choose one

True or False: In the context of digital forensics, the 'Order of Volatility' dictates that you should capture data from a hard disk drive before capturing data from the CPU cache and registers.

Question 6Choose one

A SOC analyst is analyzing a Linux server that was compromised. The attacker attempted to delete log files to cover their tracks. Which feature of the Ext4 file system might allow the analyst to recover or reconstruct the timeline of file operations even after deletion?

Question 7Choose one

While performing threat modeling for a new banking application, the team identifies a risk where a user could potentially deny performing a transaction after it has been completed. Which aspect of the STRIDE model does this scenario represent?

Question 8Choose one

An incident responder arrives at a desk where a desktop computer is powered on and suspected of containing active malware. The screen is locked. To preserve the most volatile evidence, what should be the responder's FIRST action?

9 more free samples are waiting

Create a free account to unlock the whole 210-255 sample bank, or get full access to all 207 practice questions in the simulator.

Create account