Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 381:

  Which one of the following utilities allows an attacker to scan the network in stealth mode?

  A. Wireshark
  B. whois
  C. nmap
  D. Cain and Abel
  E. UDP Unicorn
  C. nmap

• Question 382:

  Which three statements are true of social engineering? (Choose three.)

  A. Social engineering largely leverages most people's "good nature" and "desire to help" to obtain the information that is needed.
  B. Social engineering can be achieved through seemingly normal situations or appearances to obtain access to resources or physical locations otherwise off-limits to personnel.
  C. Social engineering is easy to spot and should be called out immediately in front of everyone to unveil a fraud.
  D. Social engineering leverages greed and disgruntled feelings of employees.
  A. Social engineering largely leverages most people's "good nature" and "desire to help" to obtain the information that is needed.
  B. Social engineering can be achieved through seemingly normal situations or appearances to obtain access to resources or physical locations otherwise off-limits to personnel.
  D. Social engineering leverages greed and disgruntled feelings of employees.

• Question 383:

  What are five pieces of information that an analyst can learn about an IP conversation from a NetFlow report? (Choose five.)

  A. source IP address
  B. amount of data passed
  C. user account
  D. source port
  E. destination port
  F. device hostname
  G. protocol
  H. active directory login time
  A. source IP address
  B. amount of data passed
  D. source port
  E. destination port
  G. protocol

• Question 384:

  

  Refer to the exhibit. Which of these does the exhibit demonstrate?

  A. asymmetric encryption algorithm
  B. compute a message digest
  C. symmetric encryption algorithm
  D. generating a public and private key pair
  B. compute a message digest

• Question 385:

  Which Windows directory stores the 64-bit system DLL files?

  A. Program Files (x86)
  B. Program Files
  C. System
  D. System32
  D. System32

• Question 386:

  What are three similarities between IDS and IPS sensors? (Choose three.)

  A. Both use reflective ACLs to detect malicious network activity.
  B. Both can verify that the rules of network protocols such as TCP/IP, UDP, and ICMP are properly followed.
  C. Both use signature files to determine whether suspicious activity is occurring.
  D. Both can block attacks that would normally pass through a traditional firewall device.
  E. Both can analyze all traffic that controls Layer 2-to-Layer 3 mappings, such as ARP and DHCP.
  B. Both can verify that the rules of network protocols such as TCP/IP, UDP, and ICMP are properly followed.
  C. Both use signature files to determine whether suspicious activity is occurring.
  E. Both can analyze all traffic that controls Layer 2-to-Layer 3 mappings, such as ARP and DHCP.

• Question 387:

  Which two actions in response to traffic sent to a nonlistening UDP port are valid? (Choose two.)

  A. ICMP parameter problem
  B. UDP packet with the RST flag set
  C. ICMP source quench
  D. It does not send a reply.
  E. ICMP destination unreachable
  A. ICMP parameter problem
  D. It does not send a reply.

• Question 388:

  Which of the following is when the attacker sends traffic slower than normal, not exceeding thresholds inside the time windows the signatures use to correlate different packets together?

  A. Traffic insertion
  B. Protocol manipulation
  C. Traffic fragmentation
  D. Timing attack
  D. Timing attack

• Question 389:

  What are three goals of OpenSOC? (Choose three.)

  A. to provide a collaborative open source community for development of an extensible and scalable advanced security analytics tool
  B. to provide a collaborative open communication platform for network outages and performance monitoring
  C. to encourage open communication for additional features and identification of deficiencies for a stable and functionally usable tool
  D. to identify key feature enhancements to drive technology efforts around efficient security analytics
  E. to identify key performance indicators for network device analysis and capacity planning
  A. to provide a collaborative open source community for development of an extensible and scalable advanced security analytics tool
  C. to encourage open communication for additional features and identification of deficiencies for a stable and functionally usable tool
  D. to identify key feature enhancements to drive technology efforts around efficient security analytics

• Question 390:

  What is a threat to the end user regarding web scripting?

  A. The user may be denied access to the web site.
  B. The web script may deliver malware without the user's knowledge.
  C. The web script provides dynamic content to the user's browser.
  D. Client-side scripting may not be permitted due to security policy.
  B. The web script may deliver malware without the user's knowledge.