Online Access Free 210-255 Practice Test

Which of the following is typically a responsibility of a PSIRT (Product SIRT)?

• A.Monitor security logs
• B.Configure the organization's firewall
• C.Investigate security incidents in a SOC
• D.Disclosure vulnerabilities in the organization's products and services

Which two HTTP header fields relate to intrusion analysis? (Choose two).

• A.connection
• B.handshake type
• C.user-agent
• D.language
• E.host

How is confidentiality defined in the CVSS v3.0 framework?

• A.confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability
• B.confidentiality of the information resource managed by a person due to a successfully vulnerability
• C.confidentiality of the information resource managed by a software component due to an unsuccessfully exploited vulnerability
• D.confidentiality of the information resource managed by person due to an unsuccessfully exploited vulnerability

Which element is included in an incident response plan?

• A.day-to-day firefighting
• B.junior analyst approval
• C.organization mission
• D.siloed approach to communications

What does the CSIRT incident response provider usually do?

• A.handle reports of vulnerabilities in their software or hardware products
• B.provide incident handling services to their parent organization.
• C.provide incident handling services to a country
• D.coordinate and facilitate the handling of incidents across various CSIRTs
• E.offer incident handling services as a for-fee service to other organizations
• F.focus on synthesizing data from various sources to determine trends and patterns in incident activity