Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 1041:

  Which file is the primary configuration file for DNS name resolution in Linux?

  A. hosts
  B. lmhosts
  C. resolv.conf
  D. dnshost.conf
  C. resolv.conf

• Question 1042:

  Which of the following explains features of a traditional stateful firewall?

  A. Access control is done by application awareness and visibility.
  B. Access control is done by the five-tuple (source and destination IP addresses, source and destination ports, and protocol).
  C. Application inspection is not supported.
  D. Traditional stateful firewalls support advanced malware protection
  B. Access control is done by the five-tuple (source and destination IP addresses, source and destination ports, and protocol).

• Question 1043:

  Which of the following are examples of symmetric encryption algorithms?

  A. AES
  B. IDEA
  C. Diffie-Hellman
  D. MD5
  A. AES
  B. IDEA

• Question 1044:

  Which definition of the IIS Log Parser tool is true?

  A. a logging module for IIS that allows you to logto a database
  B. a data source control to connect to your data source
  C. a powerful, versatile tool that makes it possible to run SQL-like queries against log files
  D. a powerful, versatile tool that verifies the integrity of the log files
  C. a powerful, versatile tool that makes it possible to run SQL-like queries against log files

• Question 1045:

  Which browser is used by individuals to maintain anonymity on the Internet and to surf the dark web?

  A. OnionBrowser
  B. Tor
  C. Chrome
  D. Firefox
  B. Tor

• Question 1046:

  Which four of the following information is included in sets of cryptographic algorithms that are defined by an SSL/TLS cipher suite? (Choose four.)

  A. authentication and key exchange algorithms
  B. public key version and type
  C. encryption algorithm
  D. peer IP address information
  E. message authentication code algorithm
  F. the PRF
  A. authentication and key exchange algorithms
  C. encryption algorithm
  E. message authentication code algorithm
  F. the PRF

• Question 1047:

  What are two benefits to deploying a threat-monitoring appliance for SMTP traffic? (Choose two.)

  A. Email content security appliances detect malware and detonate it in a sandbox environment for further analysis.
  B. Email content security appliances allow Snort rules to trigger system administrator alerts.
  C. Email content security appliances can filter sensitive outbound email.
  D. Reputation-based filtering can be deployed to filter a large percentage of spam email.
  E. Email content security appliances establish secure tunnels between end-user email clients and the SMTP server, reducing the need for email authentication.
  C. Email content security appliances can filter sensitive outbound email.
  D. Reputation-based filtering can be deployed to filter a large percentage of spam email.

• Question 1048:

  Which of the following are examples of exploit kits?

  A. Angler
  B. Mangler
  C. Blackhole
  D. Black ICE
  A. Angler
  C. Blackhole

• Question 1049:

  Which two statements are correct regarding NSA Suite B? (Choose two.)

  A. Use AES with 128- or 256-bit keys in the GCM mode.
  B. The SHA-1 message digest has stronger security than SHA-2.
  C. NSA Suite B calls for AES CBC mode because it can provide authenticated encryption.
  D. NSA Suite B calls for ECDH, which is a more advanced variant of the Diffie-Hellman algorithm using the elliptic curve mathematics model.
  A. Use AES with 128- or 256-bit keys in the GCM mode.
  D. NSA Suite B calls for ECDH, which is a more advanced variant of the Diffie-Hellman algorithm using the elliptic curve mathematics model.

• Question 1050:

  What is the purpose of a DLP policy?

  A. to prevent end users from abusing corporate email services B. to prevent end users from participating in internal phishing attacks
  C. to prevent end users from sending sensitive or critical information outside the corporate network
  D. to prevent end users from inadvertently disrupting corporate email services
  C. to prevent end users from sending sensitive or critical information outside the corporate network