300-215Updated 17d ago · Sep 16, 2026
Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)
134 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 13 questions are free to preview.
Topics
| # | Topic | Questions | Free |
|---|---|---|---|
| 1 | Forensics Techniques | 105 | 13 |
Preview
13 of 105 accessibleQuestion 1 · Forensics Techniques Open
Which tool performs memory analysis?
Answer: C
Volatility is a memory-forensics framework that analyzes memory dumps to extract and investigate artifacts such as processes, network connections, and injected code.
Question 2 · Fundamentals Open
What is the purpose of a disassembler?
Answer: A
A disassembler converts executable machine code into an assembly-language representation, enabling analysts to inspect malware statically without executing it.
Question 3 · Forensics Processes Open
An “unknown error code” appears on an ESXi host during authentication. An engineer reviews the authentication logs but cannot identify the issue. Analysis of the vCenter agent logs reveals no connectivity errors. Which log file should the engineer check next to continue troubleshooting the error?
Answer: A
`syslog.log` records ESXi management-service initialization, watchdog activity, scheduled tasks, and DCUI use, making it the appropriate follow-up log when authentication logs do not explain the issue and the vCenter agent log shows no connectivity failure. `vmksummary.log` contains periodic host summary information, while `shell.log` records ESXi Shell activity and entered commands.
**Learn more:** [Location and Contents of ESXi log files](https://knowledge.broadcom.com/external/article/306962/location-of-esxi-log-files.html)