Cisco Cisco Certified CyberOps Associate 210-250 Questions & Answers

• Question 11:

  Which TCP flag(s) must be set in a packet in order for the packet to match an ACL entry that contains the established keyword?

  A. SYN only

  B. ACK only

  C. RST only

  D. SYN or ACK

  E. ACK or RST

  Correct Answer: E

• Question 12:

  Which one of the following commands is required on an interface in order to apply an ACL as a packet filter?

  A. access-class

  B. ip access-group

  C. ip access-list

  D.

  Correct Answer: B

• Question 13:

  How can the established keyword in an ACL entry be used?

  A. to permit only the returning TCP packets from an already existing TCP connection, and deny the initial TCP packet of a new session from an untrusted network

  B. to permit both the initial TCP packet of a new session and the returning TCP packets from an existing TCP connection

  C. to permit only the initial TCP packet of a new session

  D. to change a router into a true stateful firewall controlling the access on a session-by-session basis

  Correct Answer: A

• Question 14:

  In an ACL, if a traffic flow is not explicitly permitted, what will be the result of the traffic flow once it has expired testing of all the access control entries in the list?

  A. The traffic will be implicitly permitted.

  B. The traffic will be explicitly permitted.

  C. The traffic will be explicitly denied.

  D. The traffic will be implicitly denied.

  Correct Answer: D

• Question 15:

  Which three types of devices can do network address translation (NAT)? (Choose three.)

  A. routers

  B. Layer 3 switches

  C. bridges

  D. wireless access points

  E. proxy servers

  F. firewalls

  Correct Answer: ABF

• Question 16:

  Which form of NAT enables a firewall to selectively perform translations based on destination address?

  A. static NAT

  B. dynamic PAT

  C. static PAT

  D. policy NAT

  E. dynamic NAT

  Correct Answer: D

• Question 17:

  Which form of NAT uses port addresses to distinguish between translated sessions?

  A. static NAT

  B. policy NAT

  C. dynamic PAT

  D. dynamic NAT

  Correct Answer: C

• Question 18:

  On a Cisco Catalyst switch, which type of Layer 3 interface can be configured for any VLAN that exists on the Layer 3 switch?

  A. bridged virtual interface (BVI)

  B. switched virtual interface (SVI)

  C. loopback interface

  D. routed virtual interface (RVI)

  Correct Answer: B

• Question 19:

  What is the purpose of the switched virtual interface on a multilayer switch?

  A. enables the switch to perform QoS functions such as CBWFQ, LLQ, and traffic shaping

  B. allows the multiprotocol switch to load balance traffic across trunk ports

  C. provides basic Layer 3 functions for the Layer 2 switch ports assigned to a VLAN

  D. prevents routing and bridge loops by creating broadcast and collision domains

  Correct Answer: C

• Question 20:

  Which four of the following are interior gateway routing protocols? (Choose four.)

  A. BGP

  B. EIGRP

  C. GRE

  D. HSRP

  E. IS-IS

  F. OSPF

  G. RIP

  Correct Answer: BEFG