Free Cisco 300-215 Exam Questions

Question 1

A security team needs to prevent a remote code execution vulnerability. The vulnerability can be exploited only by sending '${ string in the HTTP request. WAF rule is blocking '${', but system engineers detect that attackers are executing commands on the host anyway. Which action should the security team recommend?

A : Enable URL decoding on WAF.

B : Block incoming web traffic.

C : Add two WAF rules to block 'S' and '{' characters separately.

D : Deploy antimalware solution.

Answer: A

Question 2

Refer to the exhibit.An experienced cybersecurity analyst is investigating a sophisticated suspected breach on a Windows server within an enterprise network and compiled the evidence gathered so far Which action should the analyst prioritize to understand the scope and impact of the breach?

A : Review the security log alterations to understand the methods used to deactivate security systems

B : Perform a forensic memory analysis to isolate and identify the polymorphic malware's behavior and characteristics

C : Conduct a deep dive analysis of the outbound network traffic to trace the foreign IP addresses

D : Investigate the Windows Registry modifications for potential backdoors and establish a timeline of unauthorized changes

Answer: B

Question 3

Refer to the exhibit.An experienced cybersecurity analyst is investigating a sophisticated suspected breach on a Windows server within an enterprise network and compiled the evidence gathered so far Which action should the analyst prioritize to understand the scope and impact of the breach?

A : Review the security log alterations to understand the methods used to deactivate security systems

B : Perform a forensic memory analysis to isolate and identify the polymorphic malware's behavior and characteristics

C : Conduct a deep dive analysis of the outbound network traffic to trace the foreign IP addresses

D : Investigate the Windows Registry modifications for potential backdoors and establish a timeline of unauthorized changes

Answer: B

Question 4

What are YARA rules based upon?

A : binary patterns

B : HTML code

C : network artifacts

D : IP addresses

Answer: A

Question 5

A : Evaluate the artifacts in Cisco Secure Malware Analytics.

B : Evaluate the file activity in Cisco Umbrella.

C : Analyze the registry activity section in Cisco Umbrella.

D : Analyze the activity paths in Cisco Secure Malware Analytics.

Answer: A