Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 151:

  Which statement is true about a SIEM system?

  A. A SIEM can identify when anomalous behavior patterns are exceeding threshold.
  B. A SIEM can detect when specific transactions occur that may be violating a policy.
  C. A SIEM cannot perform logical correlation of events as efficiently as a human can.
  D. A SIEM never needs to be tuned.
  C. A SIEM cannot perform logical correlation of events as efficiently as a human can.

• Question 152:

  In which type of an attack does an attacker send falsified and spoofed resource record information to a DNS resolver?

  A. DNS reflection attack
  B. DNS denial of service attack
  C. DNS cache poisoning
  D. DNS utilization attack
  C. DNS cache poisoning

• Question 153:

  Which of the following statements are true about the principle of least privilege?

  A. Principle of least privilege and separation of duties can be considered to be the same thing.
  B. The principle of least privilege states that all users whether they are individual contributors, managers, directors, or executives should be granted only the level of privilege they need to do their job, and no more.
  C. Programs or processes running on a system should have the capabilities they need to "get their job done," but no root access to the system.
  D. The principle of least privilege only applies to people.
  B. The principle of least privilege states that all users whether they are individual contributors, managers, directors, or executives should be granted only the level of privilege they need to do their job, and no more.
  C. Programs or processes running on a system should have the capabilities they need to "get their job done," but no root access to the system.

• Question 154:

  In military and governmental organizations, what is the classification for an asset that, if compromised, would cause severe damage to the organization?

  A. Top Secret
  B. Secret
  C. Confidential
  D. Unclassified
  B. Secret

• Question 155:

  Which of the following are examples of scalable, commercial, and open source log-collection and -analysis platforms? (Select all that apply.)

  A. Splunk
  B. Spark
  C. Graylog
  D. Elasticsearch, Logstash, and Kibana (ELK) Stack
  A. Splunk
  C. Graylog
  D. Elasticsearch, Logstash, and Kibana (ELK) Stack

• Question 156:

  Cisco AMP for Endpoints takes advantage of which of the following?

  A. Telemetry from big data, continuous analysis, and advanced analytics provided by Cisco ESA and WSA in order to detect, analyze, and stop advanced malware across endpoints
  B. Advanced analytics provided by antivirus software in order to detect, analyze, and stop advanced malware across endpoints
  C. Telemetry from big data, continuous analysis, and advanced analytics provided by Cisco threat intelligence in order to detect, analyze, and stop advanced malware across endpoints
  D. Telemetry from big data, continuous analysis, and advanced analytics provided by Cisco next-generation firewalls in order to detect, analyze, and stop advanced malware across endpoints.
  C. Telemetry from big data, continuous analysis, and advanced analytics provided by Cisco threat intelligence in order to detect, analyze, and stop advanced malware across endpoints

• Question 157:

  Given the scenario where the Downloads directory is in the home directory, which three of the following commands will navigate you to the Downloads directory? (Choose three.)

  A. cd /home//Downloads
  B. cd /etc/home/bob/Downloads
  C. cd Downloads
  D. cd ~/Downloads
  A. cd /home//Downloads
  C. cd Downloads
  D. cd ~/Downloads

• Question 158:

  Which elements are found in a typical Cisco BYOD architecture? (Select all that apply.)

  A. Mobile device management (MDM) server
  B. Cisco ISE
  C. Cisco MARS
  D. Cisco ASR5000
  A. Mobile device management (MDM) server
  B. Cisco ISE

• Question 159:

  What type of IP attack features a simultaneous, coordinated attack from multiple source machines?

  A. rogue DHCP attack
  B. DDoS attack
  C. MITM attack
  D. MAC address flooding attack
  B. DDoS attack

• Question 160:

  Which statement is true about the placement of an IPS?

  A. Placement is not important as long as the IPS is directly connected to a firewall interface.
  B. Security analysts are typically consulted about IPS placement.
  C. Optimal placement of an IPS depends on the needs and topology of the network to be protected.
  D. An IPS should never have to monitor traffic "in the wild" due to the overhead that is involved.
  D. An IPS should never have to monitor traffic "in the wild" due to the overhead that is involved.