Online Access Free 210-255 Exam Questions

Which option allows a file to be extracted from a TCP stream within Wireshark?

• A.Tools > Export > TCP
• B.File > Export Objects
• C.Analyze > Extract
• D.View > Extract

Which IETF standard technology is useful to detect and analyze a potential security incident by recording session flows that occurs between hosts?

• A.IPFIX
• B.NFlow
• C.NetFlow
• D.SFlow

In the context of incident handling phases, which two activities fall under scoping? (Choose two.)

• A.identifying the attackers that are associated with a security incident
• B.determining the number of attackers that are associated with a security incident
• C.identifying the extent that a security incident is impacting protected resources on the network
• D.determining what and how much data may have been affected
• E.ascertaining the number and types of vulnerabilities on your network

Which of the following Linux file systems not only supports journaling but also modifies important data structures of the file system, such as the ones destined to store the file data for better performance and reliability?

• A.FAT32
• B.Ext4
• C.GRUB
• D.LILO

Which option can be addressed when using retrospective security techniques?

• A.if the affected host needs a software update
• B.if the affected system needs replacement
• C.why the malware is still in our network
• D.how the malware entered our network