Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 1071:

  Which of the following describe what a threat is?

  A. Threats and vulnerabilities are the same.
  B. A threat is an exploit against a patched vulnerability.
  C. A threat is any potential danger to an asset.
  D. A threat is a piece of software aimed at exploiting a vulnerability
  C. A threat is any potential danger to an asset.

• Question 1072:

  Which example of personally identifiable information is true?

  A. employer address
  B. date of birth
  C. employee benefit
  D. vulnerability on a personal laptop
  B. date of birth

• Question 1073:

  To capture traffic that is not destined for the local machine, in which mode must the network card must be placed?

  A. promiscuous
  B. transparent
  C. not attached
  D. managed
  E. bypass
  A. promiscuous

• Question 1074:

  Based on which statement does the discretionary access control security model grant or restrict access?

  A. discretion of the system administrator
  B. security policy defined by the owner of an object
  C. security policy defined by the system administrator
  D. role of a user within an organization
  B. security policy defined by the owner of an object

• Question 1075:

  What is a Trojan horse?

  A. A piece of malware that downloads and installs other malicious content from the Internet to perform additional exploitation on an affected system.
  B. A type of malware that executes instructions determined by the nature of the Trojan to delete files, steal data, and compromise the integrity of the underlying operating system, typically by leveraging social engineering and convincing a user to install such software.
  C. A virus that replicates itself over the network infecting numerous vulnerable systems.
  D. A type of malicious code that is injected into a legitimate application. An attacker can program a logic bomb to delete itself from the disk after it performs the malicious tasks on the system.
  B. A type of malware that executes instructions determined by the nature of the Trojan to delete files, steal data, and compromise the integrity of the underlying operating system, typically by leveraging social engineering and convincing a user to install such software.

• Question 1076:

  What are three characteristics of an advanced persistent threat (APT)? (Choose three.)

  A. one time or drive-by file dropper
  B. pursues its objectives repeatedly over an extended period
  C. easily identified by common antivirus tools
  D. adapts to defenders' efforts to detect it
  E. maintains a level of interactions with the attacker's command and control infrastructure to execute its objectives
  F. usually injected via email attachment
  G. does not exhibit any signs of polymorphic behavior
  B. pursues its objectives repeatedly over an extended period
  D. adapts to defenders' efforts to detect it
  E. maintains a level of interactions with the attacker's command and control infrastructure to execute its objectives

• Question 1077:

  Endpoint logs indicate that a machine has obtained an unusual gateway address and unusual DNS servers via DHCP. Which option is this situation most likely an example of?

  A. command injection
  B. man in the middle attack
  C. evasion methods
  D. phishing
  B. man in the middle attack

• Question 1078:

  Which directory is commonly used on Linux systems to store log files, including syslog and apache access logs?

  A. /etc/log
  B. /root/log
  C. /lib/log
  D. /var/log
  D. /var/log

• Question 1079:

  After attackers gain access to a system, what method can they use to expand their access to other systems without exploiting vulnerabilities on other systems in the network?

  A. change the network gateway address to the attacker's command and control server
  B. establish a Metasploit session to 127.0.0.1 and pass the user's account hash to it
  C. take advantage of domain trust to make connections to a partner network
  D. block employees from visiting social media web sites on the company network
  C. take advantage of domain trust to make connections to a partner network

• Question 1080:

  In which phase of access control is access granted to a resource with specific privileges?

  A. Identification
  B. Authentication
  C. Authorization
  D. Accounting
  C. Authorization