Cisco Cisco Certifications 210-250 Questions & Answers

• Question 1081:

  What is an advantage of network-based antimalware compared to a host-based solution?

  A. It can block malware at the entry point.

  B. It can check the integrity of a file on the host.

  C. It can receive a signature and reputation from the cloud.

  D. It can use a heuristic engine for malware detection.

  Correct Answer: A

• Question 1082:

  A host on an isolated port can communicate with which of the following?

  A. A host on another isolated port

  B. A host on a community port

  C. A server on a community port

  D. With the promiscuous port only

  Correct Answer: D

• Question 1083:

  Which port access control technology allows dynamic authorization policy to be downloaded from the authentication server?

  A. VLAN map

  B. Port security

  C. 802.1x

  D. MAC access list

  Correct Answer: C

• Question 1084:

  Where is EAPoL traffic seen?

  A. Between the supplicant and the authentication server

  B. Between the supplicant and the authenticator

  C. Between the authenticator and the authentication server

  D. None of the above

  Correct Answer: B

• Question 1085:

  What is the Security Group Tag Exchange (SXP) protocol used for?

  A. To transmit SGT to the egress point for enforcement

  B. To send SGT information to a hardware-capable Cisco TrustSec device for tagging

  C. To send SGT information from the authentication server to the authenticator

  D. To send SGT information to the supplicant

  Correct Answer: B

• Question 1086:

  Where does the RADIUS exchange happen?

  A. Between the user and the network access server

  B. Between the network access server and the authentication server

  C. Between the user and the authentication server

  D. None of the above

  Correct Answer: B

• Question 1087:

  Which AAA protocol allows for capabilities exchange?

  A. RADIUS

  B. TACACS+

  C. Diameter

  D. Kerberos

  Correct Answer: C

• Question 1088:

  Which type of control best describes an IPS dropping a malicious packet?

  A. Preventive

  B. Corrective

  C. Compensating

  D. Recovery

  Correct Answer: A

• Question 1089:

  Which type of controls best describe a fence?

  A. Administrative, preventive

  B. Administrative, logical

  C. Physical, deterrent

  D. Logical, compensating

  Correct Answer: C

• Question 1090:

  What is included in a capability table?

  A. Several objects with user access rights

  B. Several subjects with user access rights

  C. Objects and subjects with their access rights

  D. Access rights

  Correct Answer: A