Cisco Cisco Certifications 210-250 Questions & Answers

• Question 371:

  What is the key to the success of an MITM attack?

  A. The hacked machine becomes overwhelmed with responses.

  B. TCP/IP bugs make it easy to crash older operating systems.

  C. The attacker waits until after a communication session is established.

  D. Packet flooding consumes resources.

  Correct Answer: C

• Question 372:

  Which two of the following are higher-level protocols that rely upon TCP/IP and are susceptible to attacks such as session hijacking? (Choose two.)

  A. ARP

  B. HTTP

  C. UDP

  D. Telnet

  E. ICMP

  Correct Answer: BD

• Question 373:

  Which four of the following are considered the main protocols of the Internet Protocol suite? (Choose four.)

  A. UDP

  B. TCP

  C. HTTP

  D. IP

  E. SSL

  F. ICMP

  G. FTP

  Correct Answer: ABDF

• Question 374:

  Which one of the following options is the AP mode that a typical home Wi-Fi router operates in?

  A. lightweight

  B. standalone

  C. CAPWAP

  D. hybrid

  Correct Answer: B

• Question 375:

  Which four of the following options are benefits of using LWAPs and a unified wireless solution? (Choose four.)

  A. flexible client roaming

  B. standalone capability

  C. dynamic client load balancing

  D. security management

  E. simplicity in network design

  F. wireless intrusion protection system

  Correct Answer: ACDF

• Question 376:

  Which two of the following statements are true regarding an autonomous access point? (Choose two.)

  A. old technology that has no place in today's networks, so it should not be used

  B. self-contained and offer one or more fully functional standalone BSSs

  C. can operate without the use of a centralized controller

  D. can dynamically cover gaps in radio coverage in the event of a peer AP failure

  Correct Answer: BC

• Question 377:

  Which one of the following statements best describes a lightweight access point (LWAP)?

  A. An LWAP is an AP with low bandwidth and processing capability for small deployments.

  B. An LWAP is part of a unified wireless access system where a centralized wireless LAN controller manages the administrative functions of network access.

  C. An LWAP weighs less than the autonomous AP, so it can be mounted safely on the drop ceiling of a room.

  D. Each LWAP handles its own policies with no central point of entry between the wireless and wired networks.

  Correct Answer: B

• Question 378:

  Which one of the following options does the established keyword in an ACL entry indicate?

  A. The established keyword function has been deprecated and no longer serves as a functional configuration element.

  B. Reply packets that belong to an established TCP connection will be permitted if the TCP packet has the ACK or RST bit set.

  C. Reply packets that belong to an established TCP connection will be permitted if the TCP packet has the SYN or FIN bit set.

  D. The device interface will modify the source IP address to that of the interface that it enters through.

  Correct Answer: B

• Question 379:

  Which one of the following options is the implicit ACL entry that is at the end of the ACL?

  A. deny ip any any

  B. deny tcp any any

  C. permit ip any any

  D. permit tcp any any

  E. There is no implicit ACL entry.

  Correct Answer: A

• Question 380:

  Which three of the following statements are true regarding ACLs? (Choose three.)

  A. ACLs provide packet filtering for routers and firewalls to protect network segments that require more security.

  B. ACLs are used to perform stateful packets inspections and filtering on routers and firewalls.

  C. ACLs provide a basic level of security and control the packets that pass through the routers or firewalls, preventing them from getting to the different parts of the network.

  D. At a minimum, it is important to configure the ACLs on the network edge routers or firewalls.

  E. ACLs can be applied only at the inbound direction and not at the outbound direction.

  Correct Answer: ACD