Cisco Cisco Certifications 210-250 Questions & Answers

• Question 341:

  Which two are software vulnerability scanners? (Choose two.)

  A. VmStat

  B. Nessus

  C. fingerprint

  D. open VAS

  Correct Answer: BD

• Question 342:

  What is an example of a reconnaissance attack tool that will cycle through all well-known ports to provide a complete list of all services that are running on the hosts?

  A. Netuse

  B. ipconfig

  C. NMAP

  D. show run

  Correct Answer: C

• Question 343:

  What best describes an attack surface?

  A. a way to classify which tools were used in an attack

  B. the sum of the different points ("attack vectors") in a given computing device or network that are accessible to an unauthorized user ("attacker")

  C. the people who are involved in protecting the network perimeter

  D. only describes the data that is gathered about an attack

  Correct Answer: B

• Question 344:

  What best describes an attack vector?

  A. the resolution of an attack

  B. a path, method, or route by which an attack was carried out

  C. the result of, or damage from, an attack

  D. the last stage of the attack continuum

  Correct Answer: B

• Question 345:

  What two are examples of UDP-based attacks? (Choose two.)

  A. SYN flood

  B. SQL slammer

  C. UDP flooding

  D. MAC address flooding

  Correct Answer: BC

• Question 346:

  What two types of attacks are examples of ICMP DoS attacks? (Choose two.)

  A. smurf attack

  B. blooming onion attack

  C. ping of death attack

  D. DHCP depletion attack

  Correct Answer: AC

• Question 347:

  What phase of the TCP communication process is attacked during a TCP SYN flood attack?

  A. three-way handshake

  B. connection established

  C. connection closed

  D. connection reset

  Correct Answer: A

• Question 348:

  What type of IP attack occurs when an attacker inserts itself into a communication session and then takes over the session?

  A. MAC address flooding attack

  B. session hijacking

  C. DHCP depletion attack

  D. DoS attack

  Correct Answer: B

• Question 349:

  Which two of the following statements are true regarding early TCP/IP development? (Choose two.)

  A. TCP/IP was the only network protocol suite available and was developed for internet work environments.

  B. The focus was on solving the technical challenges of moving information quickly and reliably, not to secure it.

  C. The model was developed as a flexible, fault-tolerant set of protocols.

  D. The design and architecture of TCP/IP have not changed since its adoption in the early 1970s.

  Correct Answer: BC

• Question 350:

  What is one way of mitigating DHCP attacks by using a Cisco switch?

  A. VLAN segmentation

  B. MAC address security

  C. DHCP snooping

  D. DHCP authentication

  Correct Answer: C