300-220Updated 1d ago · Sep 4, 2026

Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity

Name: Conducting Threat Hunting and Defending using Cisco Technologies for Cybersecurity
Brand: Cisco
Price: 29.00 USD
Availability: InStock

60 questions across 1 topics, with suggested answers, explanations where available, and imported community discussion. The first 6 questions are free to preview.

Browse questions Practice mode

Topics

#	Topic	Questions	Free
1	Threat Hunting Fundamentals	60	6

Preview

6 of 60 accessible

Question 1 · Threat Hunting Fundamentals Open

How does integrating multiple products improve data visibility and analysis within a corporate environment?

Answer: B A central data visualization tool integrated with product APIs can collect and correlate inputs from multiple systems, providing unified visibility and more effective analysis.

Question 2 · Threat Actor Attribution Techniques Open

An analyst receives a report stating that the infection chain starts with a phishing email containing a malicious download link. When the victim downloads the malicious RAR file, the archive requires a specific password for extraction, revealing a fake PDF executable malware file and an image printing file. After the malware is decrypted and the fake PDF executable is run, the embedded LummaC2 or Rhadamanthys information stealer executes automatically, collects the victim’s credentials and data, and sends them to the C2 server. Which conclusion should the analyst make about the threat actor?

Answer: C The activity is a multi-stage intrusion: a phishing link delivers a password-protected archive and disguised executable, which helps bypass security inspection before executing an information stealer. The payload collects credentials and data and transmits them to a command-and-control server, establishing sensitive-information exfiltration as the operation’s primary objective. MITRE ATT&CK identifies malicious-link phishing as a method for delivering malware, including Lumma Stealer. **Learn more:** [MITRE ATT&CK: Phishing—Spearphishing Link (T1566.002)](https://attack.mitre.org/techniques/T1566/002/)

Question 3 · Threat Actor Attribution Techniques Open

Refer to the exhibit. What distinguishes the procedures used by each APT group?

Answer: D Plink’s `-R` option creates remote SSH port forwarding, forming an SSH tunnel to the local RDP endpoint. `sc.exe \\HFDC01 query` queries service information on the named remote server, which is service enumeration. Microsoft documents that `sc.exe query` obtains and displays service information and that its server parameter identifies a remote server in UNC format. **Learn more:** [Sc.exe query](https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/sc-query)