Free Cisco 300-215 Exam Questions

Question 1

Refer to the exhibit.An experienced cybersecurity analyst is investigating a sophisticated suspected breach on a Windows server within an enterprise network and compiled the evidence gathered so far Which action should the analyst prioritize to understand the scope and impact of the breach?

A : Review the security log alterations to understand the methods used to deactivate security systems

B : Perform a forensic memory analysis to isolate and identify the polymorphic malware's behavior and characteristics

C : Conduct a deep dive analysis of the outbound network traffic to trace the foreign IP addresses

D : Investigate the Windows Registry modifications for potential backdoors and establish a timeline of unauthorized changes

Answer: B

Question 2

Refer to the exhibit.Which two actions should be taken based on the intelligence information? (Choose two.)

A : Block network access to all .shop domains

B : Add a SIEM rule to alert on connections to identified domains.

C : Use the DNS server to block hole all .shop requests.

D : Block network access to identified domains.

E : Route traffic from identified domains to block hole.

Answer: B,D

Question 3

Refer to the exhibit.An experienced cybersecurity analyst is investigating a sophisticated suspected breach on a Windows server within an enterprise network and compiled the evidence gathered so far Which action should the analyst prioritize to understand the scope and impact of the breach?

A : Review the security log alterations to understand the methods used to deactivate security systems

B : Perform a forensic memory analysis to isolate and identify the polymorphic malware's behavior and characteristics

C : Conduct a deep dive analysis of the outbound network traffic to trace the foreign IP addresses

D : Investigate the Windows Registry modifications for potential backdoors and establish a timeline of unauthorized changes

Answer: B

Question 4

Refer to the exhibit.What is the IOC threat and URL in this STIX JSON snippet?

A : malware;‘http://x4z9arb.cn/4712/’

B : malware; x4z9arb backdoor

C : x4z9arb backdoor;http://x4z9arb.cn/4712/

D : malware; malware--162d917e-766f-4611-b5d6-652791454fca

E : stix;‘http://x4z9arb.cn/4712/’

Answer: A

Question 5

What are YARA rules based upon?

A : binary patterns

B : HTML code

C : network artifacts

D : IP addresses

Answer: A