300-215 by Cisco Valid Free Exam Practice Test

Question 1

Which two tools conduct network traffic analysis in the absence of a graphical user interface? (Choose two.)

A. Network Extractor B. TCPdump C. Wireshark D. NetworkDebuggerPro E. TCPshark

Correct Answer: B,E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit.

A web hosting company analyst is analyzing the latest traffic because there was a 20% spike in server CPU usage recently. After correlating the logs, the problem seems to be related to the bad actor activities. Which attack vector is used and what mitigation can the analyst suggest?

A. Phishing attack; conduct regular user training and use email filtering solutions. B. SQL Injection; implement input validation and use parameterized queries. C. Brute-force attack; implement account lockout policies and roll out MFA. D. Distributed denial of service; use rate limiting and DDoS protection services.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

A cybersecurity analyst is analyzing a complex set of threat intelligence data from internal and external sources. Among the data, they discover a series of indicators, including patterns of unusual network traffic, a sudden increase in failed login attempts, and multiple instances of suspicious file access on the company's internal servers. Additionally, an external threat feed highlights that threat actors are actively targeting organizations in the same industry using ransomware. Which action should the analyst recommend?

A. Advise on monitoring the situation passively because network traffic anomalies are coincidental and unrelated to the ransomware threat. B. Propose isolation of affected systems and activating the incident response plan because the organization is likely under attack by the new ransomware strain. C. Advocate providing additional training on secure login practices because the increase in failed login attempts is likely a result of employee error. D. Notify of no requirement for immediate action because the suspicious file access incidents are normal operational activities and do not indicate an ongoing threat.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which type of record enables forensics analysts to identify fileless malware on Windows machines?

A. network records B. PowerShell event logs C. IIS logs D. file event records

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Which tool conducts memory analysis?

A. Memoryze B. Volatility C. Sysinternals Autoruns D. MemDump

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

A. Analyze the activity paths in Cisco Secure Malware Analytics. B. Evaluate the artifacts in Cisco Secure Malware Analytics. C. Analyze the registry activity section in Cisco Umbrella. D. Evaluate the file activity in Cisco Umbrella.

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Cisco Conducting Forensic Analysis & Incident Response Using Cisco Technologies for CyberOps - 300-215 Exam Practice Test