stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CyberOps Week 5 Flashcards | StudBud
Explore
/
CyberOps Week 5
CyberOps Week 5
22 terms
·
StudBud Administration
·
24 plays
Cisco CyberOps Fundamentals (SECFND 210-250)
Flashcards
22 cards
F
Practice quiz
P
Host live
L
Questions
22
Answers
1
What is Cisco Prime Infrastructure?
Next-generation firewall
Network management platform to configure and monitor devices
NetFlow generation appliance
Next-generation IPS solution
2
Which are examples of application file and folder attributes that can help with whitelisting?
Filename
Application store
File size
File path
3
Cisco ASA support which of the following types of logging? (multi)
ASDM logging
Console logging
External syslog server logging
Email logging
4
What is an application blacklist?
List of entities determined to be malicious
List of entities determined to be false-positives
List of malicious websites and hosts
List of domains known to host malware
5
Which of the following is not a NetFlow version?
Version 9
Version 7
Version 5
IPFIX
6
SIEM solutions can collect logs from popular host security products, including:
NetFlow data
Personal firewalls
Antivirus or antimalware applications
Cloud logs
7
Which is not a host-based telemetry source?
Intrusion detection/prevention
Personal firewalls
Router syslogs
Antivirus or antimalware
8
Traditional Cisco NetFlow records are usually exported via which of the following methods?
UDP packets
IPFIX records
TLS packets
HTTPS packets
9
Host-based firewalls are often referred to as which of the following?
Host-based intrusion detection systems
Personal firewalls
Next-generation firewalls
Antivirus software
10
Which is a big data analytics technology that's used in security operations centers?
Next-generation firewalls
IPFIX
Hadoop
Next-generation IPS
11
Which are open source packet-capture software? (multi)
Wiremark
udpdump
Wireshark
tcpdump
12
Which is an example of a host-based encryption technology that can help protect files and email
Protected Guided Privacy (PGP)
Cisco AMP
Cisco WSA
Pretty Good Privacy (PGP)
13
What is a limitation of application whitelisting?
Ability to interact with other systems
Scalability in low-power and low-resource IoT
Continuous management of what is and what isn't on whitelist
Cost of application whitelisting technologies
14
Which are examples of sandboxing implementations?
Java Virtual Machine (JVM) sandboxing
HTML5 "sandbox" attribute for use with frames
HTML CSS and JavaScript sandboxing
Google Chromium sandboxing
15
Which is an example of free antivirus software? (multi)
Norton AntiVirus
Immunet
ClamAV
McAfee Antivirus
16
What are some useful reports you can collect from Cisco ISE related to endpoints?
Top Application reports
RADIUS Authentication reports
Administrator Login reports
Web Server Log reports
17
Which of the following is SW that can enable you to encrypt files on your HDD?
BitLocker
BitCrypt
CryptoLocker
CryptoWall
18
What are useful attributes you should seek to collect from endpoints?
Processes running on the machine
NetFlow data
IP address of endpoint or DNS hostname
Application logs
19
What is an example of a Cisco solution for endpoint protection?
Cisco ESA
Firepower Endpoint System
Cisco ASA
Cisco AMP for Endpoints
20
In what location do Linux-based systems store most of their logs, including syslog?
/etc/log
/var/log
/dev/log
/opt/logs
21
Which are examples of scalable, commercial, & open source log-collection & analysis platforms
Graylog
Splunk
Elasticsearch, Logstash, and Kibana (ELK) stack
Spark
22
Which are examples of system-based sandboxing implementations?
Threat Grid
Google Project Zero
Java JVM sandboxing
Google Chromium sandboxing
