100% Free Cisco 300-215 Practice Test Questions

Question 1

Refer to the exhibit.An experienced cybersecurity analyst is investigating a sophisticated suspected breach on a Windows server within an enterprise network and compiled the evidence gathered so far Which action should the analyst prioritize to understand the scope and impact of the breach?

A : Review the security log alterations to understand the methods used to deactivate security systems

B : Perform a forensic memory analysis to isolate and identify the polymorphic malware's behavior and characteristics

C : Conduct a deep dive analysis of the outbound network traffic to trace the foreign IP addresses

D : Investigate the Windows Registry modifications for potential backdoors and establish a timeline of unauthorized changes

Answer: B

Question 2

Rotor to the exhibit.A cybersecurity analyst must analyst the logs from an Apache server for the client. The concern is that an offboarded employee home IP address was potentially used to access the company web server via a still active VPN connection Based on this log entry, what should an analyst conclude?

A : An ex employee planted malware on the server

B : A file was downloaded from the server

C : A worker uploaded a file to the server

D : An employee has accessed a web page on the server

Answer: D

Question 3

Refer to the exhibit.

Which two actions should be taken based on the intelligence information? (Choose two.)

A : Block network access to all .shop domains

B : Add a SIEM rule to alert on connections to identified domains.

C : Use the DNS server to block hole all .shop requests.

D : Block network access to identified domains.

E : Route traffic from identified domains to block hole.

Answer: B,D

Question 4