Cisco Cisco Certifications 210-250 Questions & Answers

• Question 191:

  Which definition describes the main purpose of a Security Information and Event Management solution?

  A. a database that collects and categorizes indicators of compromise to evaluate and search for potential security threats

  B. a monitoring interface that manages firewall access control lists for duplicate firewall filtering

  C. a relay server or device that collects then forwards event logs to another log collection device

  D. a security product that collects, normalizes, and correlates event log data to provide holistic views of the security posture of an environment

  Correct Answer: D

• Question 192:

  Which definition of permissions in Linux is true?

  A. rules that allow network traffic to go in and out

  B. table maintenance program

  C. written affidavit that you have to sign before using the system

  D. attributes of ownership and control of an object

  Correct Answer: D

• Question 193:

  Which type of attack occurs when an attacker is successful in eavesdropping on a conversation between two IP phones?

  A. replay

  B. man-in-the-middle

  C. dictionary

  D. known-plaintext

  Correct Answer: B

• Question 194:

  Which protocol is expected to have a user agent, host, and referrer header in a packet capture?

  A. NTP

  B. HTTP

  C. DNS

  D. SSH

  Correct Answer: B

• Question 195:

  Which evasion method involves performing actions slower than normal to prevent detection?

  A. traffic fragmentation

  B. tunneling

  C. timing attack

  D. resource exhaustion

  Correct Answer: C

  Reference:https://books.google.com/books?id=KIwLSddtAWsCandpg=PA58andlpg=PA58anddq=timing+attack+performing+actions+slower+than+normal+to+prevent+detectionandsource=blandots=9qu7ywV-mXandsig=_9lwcDDqWNaYlEeP7VkR0MPAOEandhl=enandsa=Xandved=0ahUKEwiRwo_P8vvRAhVKyoMKHaUlAUQQ6AEIITAB#v=onepageandq=timing%20attack%20performing%20actions%20slower%20than%20normal%20to%20prevent%20detectionandf=false

• Question 196:

  Which definition of a fork in Linux is true?

  A. daemon to execute scheduled commands

  B. parentdirectory name of a file path name

  C. macros for manipulating CPU sets

  D. new process created by a parent process

  Correct Answer: D

• Question 197:

  Which identifier is used to describe the application or process that submitted a log message?

  A. action

  B. selector

  C. priority

  D. facility

  Correct Answer: D

  Reference: https://www.tutorialspoint.com/unix/unix-system-logging.htm

• Question 198:

  Which three statements best describe password attack countermeasures? (Choose three.)

  A. Give password hints upon failure.

  B. Lock the account or increase the delay between log-in attempts when there have been repeated failures.

  C. Use two-factor authentication.

  D. Write the password on a sticky note and post it under the keyboard.

  E. Enforce a password complexity policy

  Correct Answer: BCE

• Question 199:

  Which three are considered best practices for passwords? (Choose three.)

  A. Make the password at least 8 characters long.

  B. Use something familiar such as your phone number so it is easy to remember.

  C. Include at least one number.

  D. Include at least one capital character.

  E. Use the same password for multiple accounts.

  Correct Answer: ACD

• Question 200:

  What are three valid fields in a DNS resource record? (Choose three.)

  A. RDATA

  B. PTR

  C. AAAA

  D. TTL

  E. CLASS

  Correct Answer: ADE