Cisco Cisco Certifications 210-250 Questions & Answers

• Question 181:

  Which two tasks can be performed by analyzing the logs of a traditional stateful firewall? (Choose two.)

  A. Confirm the timing of network connections differentiated by the TCP 5-tuple.

  B. Audit the applications used within a social networking web site.

  C. Determine the user IDs involved in an instant messaging exchange.

  D. Map internal private IP addresses to dynamically translated external public IP addresses.

  E. Identify the malware variant carried by an SMTP connection

  Correct Answer: AD

• Question 182:

  Which term represents a potential danger that could take advantage of a weakness in a system?

  A. vulnerability

  B. risk

  C. threat

  D. exploit

  Correct Answer: C

• Question 183:

  An intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources. Which evasion technique does this attempt indicate?

  A. traffic fragmentation

  B. resource exhaustion

  C. timing attack

  D. tunneling

  Correct Answer: B

• Question 184:

  Which encryption algorithm is the strongest?

  A. AES

  B. CES

  C. DES

  D. 3DES

  Correct Answer: A

• Question 185:

  Which tool is commonly used by threat actors on a webpage to take advantage of the software vulnerabilities of a system to spread malware?

  A. exploit kit

  B. root kit

  C. vulnerability kit

  D. script kiddie kit

  Correct Answer: A

• Question 186:

  Which definition of a process in Windows is true?

  A. running program

  B. unit of execution that must be manually scheduled by the application

  C. database that stores low-level settings for the OS and for certain applications

  D. basic unit to which the operating system allocates processor time

  Correct Answer: A

• Question 187:

  Which two actions are valid uses of public key infrastructure? (Choose two.)

  A. ensuring the privacy of a certificate

  B. revoking the validation of a certificate

  C. validating the authenticity of a certificate

  D. creating duplicate copies of a certificate

  E. changing ownership of a certificate

  Correct Answer: BC

• Question 188:

  Which security monitoring data type is associated with application server logs?

  A. alert data

  B. statistical data

  C. session data

  D. transaction data

  Correct Answer: D

• Question 189:

  Which two terms are types of cross site scripting attacks? (Choose two.)

  A. directed

  B. encoded

  C. stored

  D. reflected

  E. cascaded

  Correct Answer: CD

• Question 190:

  If a web server accepts input from the user and passes it to a bash shell, to which attack method if it vulnerable?

  A. input validation

  B. hash collision

  C. command injection

  D. integer overflow

  Correct Answer: C