Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 201:

  Why would an attacker use a proxy server in front of the exploit server?

  A. to protect the identity of the exploit server and make it harder to track
  B. to be able to infect more machines than a single server could
  C. to reduce bandwidth used by the attack infrastructure and keep loaded pages cached
  D. redundancy if there is a failure of the exploit server
  A. to protect the identity of the exploit server and make it harder to track

• Question 202:

  Which two NextGen IPS event types are most beneficial in incident response? (Choose two.)

  A. signature update event
  B. system login event
  C. network discovery event
  D. connection event
  E. intrusion event
  D. connection event
  E. intrusion event

• Question 203:

  An intrusion detection system begins receiving an abnormally high volume of scanning from numerous sources. Which evasion technique does this attempt indicate?

  A. traffic fragmentation
  B. resource exhaustion
  C. timing attack
  D. tunneling
  B. resource exhaustion

• Question 204:

  What does the sum of the risks presented by an application represent for that application?

  A. application attack surface
  B. HIPPA violation
  C. vulnerability
  D. security violation
  A. application attack surface

• Question 205:

  Why is a periodic access rights and privileges review important?

  A. To avoid privilege creep
  B. To verify a user's security clearance
  C. To ensure credentials are encrypted
  D. To assign a security label
  A. To avoid privilege creep

• Question 206:

  Which application- layer protocol that uses UDP to manage and monitor devices on the network could be exploited if it is not secured on devices?

  A. TFTP
  B. SNMP
  C. HTTPS
  D. FTP
  E. SMTP
  B. SNMP

• Question 207:

  Which two statements are true? (Choose two.)

  A. Security engineers that need to locate vulnerabilities in a managed environment commonly use vulnerability scanners, such as Nessus and OpenVAS.
  B. Attackers use vulnerability scanners such as Nessus and OpenVAS to locate vulnerabilities in potential target hosts.
  C. Vulnerability scanners, such as Nessus and OpenVAS, are safe to experiment with on a production network environment.
  D. Vulnerability scanners, such as Nessus and OpenVAS, should never be used on a production network for any reason.
  A. Security engineers that need to locate vulnerabilities in a managed environment commonly use vulnerability scanners, such as Nessus and OpenVAS.
  B. Attackers use vulnerability scanners such as Nessus and OpenVAS to locate vulnerabilities in potential target hosts.

• Question 208:

  Which of the following are metrics that can measure the effectiveness of a runbook?

  A. Mean time to repair (MTTR)
  B. Mean time between failures (MTBF)
  C. Mean time to discover a security incident
  D. All of the above
  D. All of the above

• Question 209:

  Which three are SMTP commands? (Choose three.)

  A. HELO
  B. QUIT
  C. DATA
  D. SEND
  E. SAVE
  A. HELO
  B. QUIT
  C. DATA

• Question 210:

  Which of the following describes the use of DMZs?

  A. DMZs can be configured in Cisco IPS devices to provide additional inspection capabilities.
  B. DMZs can automatically segment the network traffic.
  C. DMZs can serve as segments on which a web server farm resides or as extranet connections to business partners.
  D. DMZs are only supported in next-generation firewalls.
  C. DMZs can serve as segments on which a web server farm resides or as extranet connections to business partners.