Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 1051:

  What type of data can be learned about a server by performing a basic port scan on it with nmap?

  A. list of patches missing from applications
  B. misconfigurations of web applications allowing command injection
  C. list of all open ports and services that are running
  D. list of all systems that the server is communicating with
  E. list of users who are logged on to the server
  C. list of all open ports and services that are running

• Question 1052:

  Which of the following is the best of an overlapping fragment attack?

  A. This attack works by setting the offset values in the IP header to match up, causing one fragment to overlap another.
  B. This attack works by setting the TCP values in the IP header to not match up, causing one fragment to overlap another.
  C. This attack works by setting the UDP values in the IP header to match up, causing one fragment to overlap another.
  D. This attack works by setting the offset values in the IP header to not match up, causing one fragment to overlap another
  D. This attack works by setting the offset values in the IP header to not match up, causing one fragment to overlap another

• Question 1053:

  What two types of information are encrypted by the HTTPS protocol? (Choose two.)

  A. IP headers
  B. Ethernet headers
  C. HTTP headers
  D. HTTP cookies
  E. TCP headers
  C. HTTP headers
  D. HTTP cookies

• Question 1054:

  Cisco ASA supports which of the following types of logging? (Select all that apply.)

  A. Console logging
  B. Terminal logging
  C. ASDM logging and Email logging
  D. External syslog server logging
  A. Console logging
  B. Terminal logging
  C. ASDM logging and Email logging
  D. External syslog server logging

• Question 1055:

  Why are DNS open resolvers the focus of so many malicious activities?

  A. DNS open resolvers sit inside the enterprise firewall which must pass DNS traffic making them easy attack vectors.
  B. These servers must respond to any query from any Internet host.
  C. Since DNS open resolvers belong to no administrative authority, they cannot be secured.
  D. DNS open resolvers are used by enterprises allowing the attacker an easy means to infiltrate the enterprise network.
  B. These servers must respond to any query from any Internet host.

• Question 1056:

  What is the default port for HTTPS?

  A. 443
  B. 8080
  C. 80
  D. 22
  A. 443

• Question 1057:

  Which definition of common event format in terms of a security information and event management solution is true?

  A. type of event log used to identify a successful user login.
  B. TCP network media protocol.
  C. Event log analysis certificate that stands for certified event forensics.
  D. A standard log event format that is used for log collection.
  D. A standard log event format that is used for log collection.

• Question 1058:

  Which two options are recognized forms of phishing? (Choose two.)

  A. spear
  B. whaling
  C. mailbomb
  D. hooking
  E. mailnet
  A. spear
  B. whaling

• Question 1059:

  Which one of the following methods of cryptanalysis should you use if you only have access to the cipher text messages (all of which have been encrypted using the same encryption algorithm), and want to perform statistical analysis to attempt to determine the potentially weak keys?

  A. birthday attack
  B. chosen-plaintext attack
  C. ciphertext-only attack
  D. chosen-ciphertext attack
  C. ciphertext-only attack

• Question 1060:

  Which security technology would be best for detecting a pivot attack?

  A. Virtual private network (VPN)
  B. Host-based antivirus
  C. NetFlow solution looking for anomalies within the network
  D. Application layer firewalls
  C. NetFlow solution looking for anomalies within the network