Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 351:

  Why would an attacker use Mimikatz once they gained access to a system?

  A. to create a tunnel for covert communication channels back to the attacker network
  B. to list the user accounts currently logged on to the machine
  C. to create a new domain user account to log in to so regular users will not notice their activity
  D. to extract passwords and hashes for user accounts that have logged on to the system
  D. to extract passwords and hashes for user accounts that have logged on to the system

• Question 352:

  Which of the following is not true about symlinks?

  A. A symlink will cause a system error if the file it points to is removed.
  B. Showing the contents of a symlink will display the contents of what it points to.
  C. An orphan symlink occurs when the link a symlink points to doesn't exist.
  D. A symlink is a reference to a file or directory.
  A. A symlink will cause a system error if the file it points to is removed.

• Question 353:

  When using the 802.1Q frame tagging protocol, how much additional overhead does the protocol add to the frame structure?

  A. 8 bytes
  B. 4 bytes
  C. 2 bytes
  D. 16 bytes
  E. no impact to frame overhead
  B. 4 bytes

• Question 354:

  Why are open DNS resolvers vulnerable to attacks?

  A. because they are typically running the BIND DNS software
  B. because they are internal to an organization
  C. because they are typically configured to only accept DNS queries from specific IP addresses
  D. because they are exposed to the Internet
  D. because they are exposed to the Internet

• Question 355:

  Which of the following are benefits of encryption?

  A. Malware communication
  B. Privacy
  C. Malware mitigation
  D. Malware identification
  B. Privacy

• Question 356:

  DNS listens on which well-known ports?

  A. TCP port 53 and UDP port 53
  B. UDP port 67 and UDP port 68
  C. TCP port 21 and TCP port 22
  D. TCP 161 and UDP 161
  A. TCP port 53 and UDP port 53

• Question 357:

  Which is a true statement about a symlink?

  A. Deleting the symlink file deletes the file it references.
  B. Moving a file referenced by a symlink will cause a system error.
  C. Symlinks are the same as pointers.
  D. A symlink is also known as a soft link.
  D. A symlink is also known as a soft link.

• Question 358:

  Which is a correct of daemon permissions?

  A. Daemons run at root-level access.
  B. Daemons run at super user璴evel access.
  C. Daemons run as the init process.
  D. Daemons run at different privileges, which are provided by their parent process.
  D. Daemons run at different privileges, which are provided by their parent process.

• Question 359:

  

  Refer to the exhibit. In which Linux log file do you find this output?

  A. var/log/var.log
  B. /var/log/auth.log
  C. /var/log/authorization.log
  D. /var/log/dmesg
  B. /var/log/auth.log

• Question 360:

  A ping attack that exploits the broadcast IP address in a subnet is referred to as what type of attack?

  A. red rat
  B. fraggle
  C. smurf
  D. SYN flood
  E. firewalk
  C. smurf