OpenExamsFREE PRACTICE — ANY EXAM

Cisco Certified Specialist – Cybersecurity Forensic Analysis and Incident Response — Requirements & Free Practice

US · License preparation

100 free questions · Answer explanations · No signup required

Choose what to practice

Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements

Loading selected examination banks…

Licenses, application pathways and examination requirements

Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.

Cisco Certified Specialist – Cybersecurity Forensic Analysis and Incident Response

Cisco Specialist certification in forensic analysis and incident response, earned by passing 300-215 CBRFIR.

Licensing authority: Cisco Systems, Inc.

Initial by examination
Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity

Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity

Provider
Cisco Systems, Inc.
Time limit
90 minutes
Exam fee
$US300, or use Cisco Learning Credits
Examination outline
  • Fundamentals (20%)
    • Root cause analysis report components
    • Infrastructure network device forensics
    • Antiforensic tactics, techniques, and procedures
    • Encoding and obfuscation techniques
    • YARA rules
    • DFIR tools and their roles
    • Evidence from virtualized environments
  • Forensics Techniques (20%)
    • Fileless malware analysis
    • Host file identification and location
    • Identify host IOCs from tool output
    • Determine code type
    • Scripts for parsing and searching logs
    • Forensics libraries and tools
  • Incident Response Techniques (30%)
    • Alert log interpretation
    • Data correlation by incident type
    • Attack vectors and mitigation
    • Post-incident actions
    • Mitigation for evaluated alerts
    • Response to zero-day exploitation
    • Response based on intelligence artifacts
    • Cisco detection and prevention solutions
    • Threat intelligence feeds and indicators
    • Threat actor profiles
    • Cisco threat intelligence solutions
  • Forensics Processes (15%)
    • Antiforensic techniques
    • Web application and server logs
    • Malicious network traffic analysis
    • File evaluation process
    • Binary interpretation
  • Incident Response Processes (15%)
    • Incident response goals
    • Incident response playbooks
    • ThreatGrid reports
    • Endpoint file evaluation and scans
    • Threat intelligence formats
Examination sources