Cisco Cisco Certifications 210-250 Questions & Answers

• Question 1011:

  Which of the following statements is true?

  A. WMI is a command standard used by most operating systems.

  B. WMI cannot run on older versions of Windows such as Windows 98.

  C. WMI is a defense program designed to prevent scripting languages from managing Microsoft Windows computers and services.

  D. WMI allows scripting languages to locally and remotely manage Microsoft Windows computers and services.

  Correct Answer: D

• Question 1012:

  What is a virtual address space in Windows?

  A. The physical memory allocated for processes

  B. A temporary space for processes to execute

  C. The set of virtual memory addresses that reference the physical memory object a process is permitted to use

  D. The virtual memory address used for storing applications

  Correct Answer: C

• Question 1013:

  What is the difference between a handle and pointer?

  A. A handle is an abstract reference to a value, whereas a pointer is a direct reference.

  B. A pointer is an abstract reference to a value, whereas a handle is a direct reference.

  C. A pointer is a reference to a handle.

  D. A handle is a reference to a pointer.

  Correct Answer: A

• Question 1014:

  Which of the following encryption protocols is the most secure?

  A. DES

  B. 3DES

  C. 4DES

  D. AES

  Correct Answer: D

• Question 1015:

  Which of the following is not an SSL VPN technology or feature?

  A. Reverse proxy features

  B. Port-forwarding technology and smart tunnels

  C. NAT Traversal

  D. SSL VPN tunnel client (AnyConnect Secure Mobility Client)

  Correct Answer: C

• Question 1016:

  Which browser is used by individuals to maintain anonymity on the Internet and to surf the dark web?

  A. OnionBrowser

  B. Tor

  C. Chrome

  D. Firefox

  Correct Answer: B

• Question 1017:

  Which of the following are reasons why an attacker might use VPN technology?

  A. Attackers cannot use VPN technologies without being detected.

  B. To exfiltrate data.

  C. To encrypt traffic between a compromised host and a command and control system.

  D. To evade detection.

  Correct Answer: BCD

• Question 1018:

  Which of the following is true about Diffie-Hellman?

  A. Diffie-Hellman is a key agreement protocol that enables two users or devices to authenticate each other's preshared keys without actually sending the keys over the unsecured medium.

  B. Diffie-Hellman is an encapsulation protocol that enables two users or devices to send data to each other.

  C. Diffie-Hellman is a part of the RSA encryption suite.

  D. Diffie-Hellman has three phases, and the second and third are used to encrypt data.

  Correct Answer: A

• Question 1019:

  Which of the following is not true about SSL VPNs?

  A. SSL VPNs are used in Cisco IOS routers as a site-to-site VPN solution.

  B. SSL VPNs are used in Cisco IOS routers as a remote access VPN solution.

  C. SSL VPNs are used in Cisco ASA firewalls as a remote access VPN solution.

  D. SSL VPNs can be client based or clientless.

  Correct Answer: A

• Question 1020:

  Which of the following is not true about IKEv2?

  A. IKEv1 Phase 1 has two possible exchanges: main mode and aggressive mode. There is a single exchange of a message pair for IKEv2 IKE_SA.

  B. IKEv2 has a simple exchange of two message pairs for the CHILD_SA. IKEv1 uses an exchange of at least three message pairs for Phase 2.

  C. IKEv1 has a simple exchange of two message pairs for the CHILD_SA. IKEv2 uses an exchange of at least three message pairs for Phase 2.

  D. IKEv2 is used in VPN technologies such as FlexVPN.

  Correct Answer: C