Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 111:

  Which type of control includes security training?

  A. Administrative
  B. Physical
  C. Logical
  D. None of the above
  A. Administrative

• Question 112:

  What are two data items that an analyst can learn about a data exfiltration alarm by using Cisco Stealthwatch? (Choose two.)

  A. application or protocol that is used to transfer the data
  B. IP address to which data was sent
  C. names of files that were transferred
  D. the signature that triggered the alarm
  A. application or protocol that is used to transfer the data
  B. IP address to which data was sent

• Question 113:

  In most Linux systems, where is the default location for syslog and rsyslog log file?

  A. in the /etc directory
  B. in the /log/var directory
  C. in the /etc/log directory
  D. in the /var/log directory
  D. in the /var/log directory

• Question 114:

  During the DHCP initializing state (when a client first boots up), which two DHCP messages are always sent as broadcasts? (Choose two.)

  A. DHCPOFFER
  B. DHCPDISCOVER
  C. DHCPREQUEST
  D. DHCPACK
  B. DHCPDISCOVER
  C. DHCPREQUEST

• Question 115:

  Which of the following are required before a patch can be applied? (Select all that apply.)

  A. Formally start a request for change.
  B. Perform a security assessment.
  C. Verify that the patch works correctly.
  D. Test the patch in the lab.
  A. Formally start a request for change.
  B. Perform a security assessment.
  D. Test the patch in the lab.

• Question 116:

  What input validation can a program perform to prevent buffer overflow attacks?

  A. Data input size matches what system has allocated.
  B. User has administrative rights to install programs.
  C. whether the input was downloaded from the Internet
  D. Data input is not from a command line argument.
  A. Data input size matches what system has allocated.

• Question 117:

  Which two protocols are often used for DDoS amplification attacks? (Choose two.)

  A. DNS
  B. TCP
  C. NTP
  D. ICMPv6
  E. HTTP
  A. DNS
  B. TCP

• Question 118:

  What is a trunk link used for?

  A. To pass multiple virtual LANs
  B. To connect more than two switches
  C. To enable Spanning Tree Protocol
  D. To encapsulate Layer 2 frames
  A. To pass multiple virtual LANs

• Question 119:

  What command allows a user to view a list of open files/connections?

  A. net user
  B. show net user
  C. netstat
  D. lsof
  D. lsof

• Question 120:

  Which option is true when using the traffic mirror feature in a switch?

  A. Packets are automatically decrypted.
  B. Ethernet headers are modified before capture.
  C. Packet payloads are lost.
  D. Full packet captures are possible.
  D. Full packet captures are possible.