Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 211:

  Which three statements indicate why an email proxy log would be important to a security analyst? (Choose three.)

  A. Modern email proxies compile and log per-sender behavior statistics.
  B. Most typical email proxies log outgoing emails containing sensitive confidential content that is detected by their DLP function.
  C. Most email proxies perform log filtering so that false positives are kept to a minimum.
  D. Email proxies such as Cisco ESA have the capability to identify malware attachments, drop them, and log the drop action.
  E. Most email proxies decrypt traffic so that it can be inspected.
  F. Email proxy logs contain historical information such as sender and receiver entries that can be used to track phishing attacks.
  B. Most typical email proxies log outgoing emails containing sensitive confidential content that is detected by their DLP function.
  D. Email proxies such as Cisco ESA have the capability to identify malware attachments, drop them, and log the drop action.
  F. Email proxy logs contain historical information such as sender and receiver entries that can be used to track phishing attacks.

• Question 212:

  Where are configuration records stored?

  A. In a CMDB
  B. In a MySQL DB
  C. In a XLS file
  D. There is no need to store them
  A. In a CMDB

• Question 213:

  Which of the following services are provided by a lightweight access point? (Select all that apply.)

  A. Channel encryption
  B. Transmission and reception of frames
  C. Client authentication
  D. Quality of Service
  A. Channel encryption
  B. Transmission and reception of frames

• Question 214:

  Malicious Windows operating system codes that share a single virtual address space, and can manage the system CPU and memory resources directly are running in which mode?

  A. safe
  B. user
  C. kernel
  D. privileged
  C. kernel

• Question 215:

  How many broadcast domains are created if three hosts are connected to a Layer 2 switch in full-duplex mode?

  A. 4
  B. 3
  C. None
  D. 1
  D. 1

• Question 216:

  What is the correct path to access on the example.txt file using Windows file share where the servername is "rwc" and the sharename is "users"?

  A. \rwc\users\example.txt
  B. \\rwc\users\example.txt
  C. \\rwc\users\\example.txt
  D. .rwc\users\example.txt
  E. ..rwc\users\example.txt
  B. \\rwc\users\example.txt

• Question 217:

  Which three of the following statements are true regarding the router? (Choose three.)

  A. Longer prefixes are always preferred over shorter ones when forwarding a packet.
  B. Routers use administrative distance to determine the trustworthiness of the routes
  C. Routers use routing tables to route between networks.
  D. Routers populate the routing table by dynamically learning the source IP address of incoming packets
  E. Routers are considered Layer 2 devices.
  A. Longer prefixes are always preferred over shorter ones when forwarding a packet.
  B. Routers use administrative distance to determine the trustworthiness of the routes
  C. Routers use routing tables to route between networks.

• Question 218:

  Which one of the following is the reason that asymmetric encryption is not used to perform bulk encryption?

  A. Asymmetric algorithms are substantially slower than symmetric algorithms.
  B. Asymmetric algorithms are easier to break than symmetric algorithms.
  C. Symmetric algorithms can provide authentication and confidentiality.
  D. Symmetric algorithms use a much larger key size.
  A. Asymmetric algorithms are substantially slower than symmetric algorithms.

• Question 219:

  DRAG DROP

  Match the type of attack to its example.

  Select and Place:

  

  

• Question 220:

  Which statement explains the primary difference between reputation-based detection and anomaly-based detection methods?

  A. Over time, reputation-based detection will learn and evaluate patterns that could indicate suspicious activity.
  B. Anomaly-based detection leverages use of a "signature" to determine whether suspicious activity is occurring.
  C. Reputation-based detection allows the IPS to block all traffic from known bad sources before any significant inspection is done.
  D. Anomaly-based detection is faster than reputation-based detection.
  E. Reputation-based detection leverages use of a "signature," to determine whether suspicious activity is occurring.
  C. Reputation-based detection allows the IPS to block all traffic from known bad sources before any significant inspection is done.