Practice 300-215 Exam Online

Question 1

Refer to the exhibit. Which element in this email is an indicator of attack?

A : IP Address: 202.142.155.218

B : content-Type: multipart/mixed

C : attachment: “Card-Refund”

D : subject: “Service Credit Card”

Answer: C

Question 2

Which scripts will search a log file for the IP address of 192.168.100.100 and create an output file named parsed_host.log while printing results to the console?

A :

B :

C :

D :

Answer: A

Question 3

An “unknown error code” is appearing on an ESXi host during authentication. An engineer checks the authentication logs but is unable to identify the issue. Analysis of the vCenter agent logs shows no connectivity errors. What is the next log file the engineer should check to continue troubleshooting this error?

A : /var/log/syslog.log

B : /var/log/vmksummary.log

C : var/log/shell.log

D : var/log/general/log

Answer: A

Question 4

Refer to the exhibit. What do these artifacts indicate?

A : An executable file is requesting an application download

B : A malicious file is redirecting users to different domains.

C : The MD5 of a file is identified as a virus and is being blocked.

D : A forged DNS request is forwarding users to malicious websites.

Answer: A

Question 5

What is the function of a disassembler?

A : aids performing static malware analysis

B : aids viewing and changing the running state

C : aids transforming symbolic language into machine code

D : aids defining breakpoints in program execution

Answer: A

Name:	Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CyberOps
Exam Code:	300-215
Certification:	CyberOps Professional
Vendor:	Cisco
Total Questions:	62
Last Updated:	Apr 24, 2024

Cisco 300-215