Free Cisco 300-215 Exam Questions

Question 1

An insider scattered multiple USB flash drives with zero-day malware in a company HQ building. Many employees connected the USB flash drives to their workstations. An attacker was able to get access to endpoints from outside, steal user credentials, and exfiltrate confidential information from internal web resources. Which two steps prevent these types of security incidents in the future? (Choose two.)

A : Automate security alerts on connected USB flash drives to workstations.

B : Provide security awareness training and block usage of external drives.

C : Deploy antivirus software on employee workstations to detect malicious software.

D : Encrypt traffic from employee workstations to internal web services.

E : Deploy MFA authentication to prevent unauthorized access to critical assets.

Answer: B,E

Question 2

In a secure government communication network, an automated alert indicates the presence of anomalous DLL files injected into the system memory during a routine update of communication protocols. These DLL files are exhibiting beaconing behavior to a satellite IP known for signal interception risks. Concurrently, there is an uptick in encrypted traffic volumes that suggests possible data exfiltration. Which set of actions should the security engineer prioritize?

A : Invoke a classified incident response scenario, notify national defense cyber operatives, and begin containment and eradication procedures on affected systems.

B : Conduct memory forensics to analyze the suspicious DLL files, disrupt the beaconing sequence, and assess the encrypted traffic for breach indicators.

C : Activate a secure emergency communication channel, isolate the segments of the communication network, and initiate a threat hunting operation for further anomalies.

D : Sever connections to the satellite IP, execute a rollback of the recent protocol updates, and engage counter-intelligence cybersecurity measures.

Answer: A

Question 3

An insider scattered multiple USB flash drives with zero-day malware in a company HQ building. Many employees connected the USB flash drives to their workstations. An attacker was able to get access to endpoints from outside, steal user credentials, and exfiltrate confidential information from internal web resources. Which two steps prevent these types of security incidents in the future? (Choose two.)

A : Automate security alerts on connected USB flash drives to workstations.

B : Provide security awareness training and block usage of external drives.

C : Deploy antivirus software on employee workstations to detect malicious software.

D : Encrypt traffic from employee workstations to internal web services.

E : Deploy MFA authentication to prevent unauthorized access to critical assets.

Answer: B,E

Question 4

A security team needs to prevent a remote code execution vulnerability. The vulnerability can be exploited only by sending '${ string in the HTTP request. WAF rule is blocking '${', but system engineers detect that attackers are executing commands on the host anyway. Which action should the security team recommend?

A : Enable URL decoding on WAF.

B : Block incoming web traffic.

C : Add two WAF rules to block 'S' and '{' characters separately.

D : Deploy antimalware solution.

Answer: A

Question 5

Refer to the exhibit.What is the IOC threat and URL in this STIX JSON snippet?

A : malware;‘http://x4z9arb.cn/4712/’

B : malware; x4z9arb backdoor

C : x4z9arb backdoor;http://x4z9arb.cn/4712/

D : malware; malware--162d917e-766f-4611-b5d6-652791454fca

E : stix;‘http://x4z9arb.cn/4712/’

Answer: A