Cisco Cisco Certified CyberOps Associate 210-250 Questions & Answers

• Question 1101:

  Which access control model uses the function of a subject in an organization?

  A. Discretionary access control

  B. Attribute-based access control

  C. Role-based access control

  D. Mandatory access control

  Correct Answer: C

• Question 1102:

  Which IDS system can detect attacks using encryption?

  A. Network IDS deployed in inline mode

  B. Network IDS deployed in promiscuous mode

  C. Host-based IDS

  D. Network IPS deployed in inline mode

  Correct Answer: C

• Question 1103:

  Which access control model uses environmental information to make an access decision?

  A. Discretionary access control

  B. Attribute-based access control

  C. Role-based access control

  D. Mandatory access control

  Correct Answer: B

• Question 1104:

  What is the main advantage of using a mandatory access control (MAC) model instead of a discretionary access control (DAC) model?

  A. MAC is more secure because the operating system ensures security policy compliance.

  B. MAC is more secure because the data owner can decide which user can get access, thus providing more granular access.

  C. MAC is more secure because permissions are assigned based on roles.

  D. MAC is better because it is easier to implement.

  Correct Answer: A

• Question 1105:

  Which of the following are part of a security label used in the mandatory access control model? (Select all that apply.)

  A. Classification

  B. Category

  C. Role

  D. Location

  Correct Answer: AB

• Question 1106:

  What is a common way to protect "data at rest"?

  A. Encryption

  B. Transport Layer Security

  C. Fingerprint

  D. IPSec

  Correct Answer: A

• Question 1107:

  Who is ultimately responsible for security control of an asset?

  A. Senior management

  B. Data custodian

  C. User

  D. System administrator

  Correct Answer: A

• Question 1108:

  Which type of access controls are used to protect an asset before a breach occurs? (Select all that apply.)

  A. Preventive

  B. Deterrent

  C. Corrective

  D. Recovery

  Correct Answer: AC

• Question 1109:

  Which of the following authentication methods can be considered examples of authentication by knowledge? (Select all that apply.)

  A. Password

  B. Token

  C. PIN

  D. Fingerprint

  Correct Answer: A

• Question 1110:

  When a biometric authentication system rejects a valid user, which type of error is generated?

  A. True positive

  B. False positive

  C. False rejection

  D. Crossover error

  Correct Answer: C