Cisco Cisco Certifications 210-250 Questions & Answers

• Question 111:

  Which Statement about personal firewalls is true?

  A. They are resilient against kernal attacks

  B. They can protect email messages and private documents in a similar way to a VPN

  C. They can protect the network against attacks

  D. They can protect a system by denying probing requests

  Correct Answer: D

• Question 112:

  Which three statements about host-based IPS are true? (Choose three.)

  A. It can view encrypted files

  B. It can be deployed at the perimeter

  C. It uses signature-based policies

  D. It can have more restrictive policies than network-based IPS

  E. It works with deployed firewalls

  F. It can generate alerts based on behavior at the desktop level.

  Correct Answer: ADF

• Question 113:

  Which actions can a promiscuous IPS take to mitigate an attack?

  A. modifying packets

  B. requesting connection blocking

  C. denying packets

  D. resetting the TCP connection

  E. requesting host blocking

  F. denying frames

  Correct Answer: BDE

• Question 114:

  What type of algorithm uses the same key to encryp and decrypt data?

  A. a symmetric algorithm

  B. an asymmetric algorithm

  C. a Public Key infrastructure algorithm

  D. an IP Security algorithm

  Correct Answer: A

• Question 115:

  Which of the following is true about heuristic-based algorithms?

  A. Heuristic-based algorithms may require fine tuning to adapt to network traffic and minimize the possibility of false positives.

  B. Heuristic-based algorithms do not require fine tuning.

  C. Heuristic-based algorithms support advanced malware protection.

  D. Heuristic-based algorithms provide capabilities for the automation of IPS signature creation and tuning.

  Correct Answer: A

• Question 116:

  How many broadcast domains are created if three hosts are connected to a Layer 2 switch in full-duplex mode?

  A. 4

  B. 3

  C. None

  D. 1

  Correct Answer: D

• Question 117:

  What is one of the advantages of the mandatory access control (MAC) model?

  A. Stricter control over the information access.

  B. Easy and scalable.

  C. The owner can decide whom to grant access to.

  D. Complex to administer.

  Correct Answer: A

  Strict control over the access to resources is one of the main advantages of MAC.

• Question 118:

  According to the attribute-based access control (ABAC) model, what is the subject location considered?

  A. Part of the environmental attributes

  B. Part of the object attributes

  C. Part of the access control attributes

  D. None of the above

  Correct Answer: A

• Question 119:

  Which of the following are metrics that can measure the effectiveness of a runbook?

  A. Mean time to repair (MTTR)

  B. Mean time between failures (MTBF)

  C. Mean time to discover a security incident

  D. All of the above

  Correct Answer: D

• Question 120:

  Which of the following access control models use security labels to make access decisions?

  A. Mandatory access control (MAC)

  B. Role-based access control (RBAC)

  C. Identity-based access control (IBAC)

  D. Discretionary access control (DAC)

  Correct Answer: A

  MAC uses security labels for access decisions.