Cisco Cisco Certifications 210-250 Questions & Answers

• Question 261:

  What best describes the ultimate goal of having proper security management systems and processes in an organization?

  A. protect the company assets

  B. ensure the effectiveness of the security controls

  C. eliminate all the security risks

  D. remove all vulnerabilities

  Correct Answer: A

• Question 262:

  Which regulation compliancy measure focuses on personal health care information?

  A. HIPAA

  B. PCI DSS

  C. GBLA

  D. PIPEDA

  Correct Answer: A

• Question 263:

  Which access control model originates from the military and uses security labels?

  A. access control list

  B. discretionary access control

  C. mandatory access control

  D. role-based access control

  Correct Answer: C

• Question 264:

  Which regulation specifically addresses credit card compliance?

  A. Sarbanes-Oxley

  B. PCI DSS

  C. Safe Harbor Act

  D. FISMA

  Correct Answer: C

• Question 265:

  What is the organizational benefit of incorporating CVSS into risk analysis?

  A. It gives insight into the result of a compromise or attack.

  B. It lowers the threat to detection time.

  C. It is a structured method to assist with prioritizing a vulnerability response.

  D. It makes the engineer read more information than they would have on their own.

  Correct Answer: C

• Question 266:

  What two are triggers for an organization to perform a vulnerability assessment? (Choose two.)

  A. only when the network is initially deployed

  B. when new users are brought on-board

  C. when a new technology or software is planned to be deployed

  D. when software or hardware updates are released.

  Correct Answer: CD

• Question 267:

  What three factors contribute to a CVSS score? (Choose three.)

  A. performance

  B. confidentiality

  C. privileges

  D. reliability

  E. availability

  Correct Answer: BCE

• Question 268:

  The vulnerability assessment process typically includes which four activities? (Choose four.)

  A. device discovery

  B. service enumeration

  C. patching the software and firmware

  D. reimaging the infected hosts

  E. scanning

  F. validation

  Correct Answer: ABEF

• Question 269:

  Risk is a function of which three factors? (Choose three.)

  A. threat

  B. cost of security solution

  C. vulnerabilities

  D. impact

  E. deployment time

  F. support costs

  Correct Answer: ACD

• Question 270:

  What are three examples of PII? (Choose three.)

  A. type and model of personal vehicle

  B. office location

  C. passport number

  D. business email address

  E. place and date of birth

  F. fingerprints

  Correct Answer: CEF