Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 431:

  The way you document and preserve evidence from the time you start the cyber forensics investigation to the time the evidence is presented in court is referred to as which of the following?

  A. Chain of compromise
  B. Custody of compromise
  C. Chain of forensics
  D. Chain of custody
  C. Chain of forensics

• Question 432:

  Which two of the following options are impacts of cryptography on security investigations? (Choose two.)

  A. All the employee's SSL/TLS outbound traffic should be decrypted and inspected since it requires minimal resources on the security appliance.
  B. Cryptographic attacks can be used to find a weakness in the cryptographic algorithms.
  C. With the increased legitimate usage of HTTPS traffic, attackers have taken advantage of this blind spot to launch attacks over HTTPS more than ever before.
  D. Encryption does not pose a threat to the ability of law enforcement authorities to gain access to information for investigating and prosecuting cybercriminal activities.
  B. Cryptographic attacks can be used to find a weakness in the cryptographic algorithms.
  C. With the increased legitimate usage of HTTPS traffic, attackers have taken advantage of this blind spot to launch attacks over HTTPS more than ever before.

• Question 433:

  Which two are countermeasures that an administrator should employ to protect against DNS tunneling? (Choose two.)

  A. monitor the DNS log for suspicious activities
  B. deny all DNS transactions
  C. encrypt DNS communications using a hash
  D. deploy a solution such as Cisco OpenDNS to block the DNS tunneling traffic
  A. monitor the DNS log for suspicious activities
  D. deploy a solution such as Cisco OpenDNS to block the DNS tunneling traffic

• Question 434:

  What entity that issues and signs digital certificates is trusted by the browser?

  A. Certificate Authority
  B. Certificate Notary
  C. Certificate Controller
  D. Certificate Licensor
  A. Certificate Authority

• Question 435:

  Which of the following statements is not true about SSH?

  A. SSH uses TCP port 22.
  B. SSH is composed of an SSH server, clients, and keys.
  C. SSH uses asymmetric encryption.
  D. SSH encrypts traffic between a client and an SSH server.
  C. SSH uses asymmetric encryption.

• Question 436:

  Which four of the following are considered the main protocols of the Internet Protocol suite? (Choose four.)

  A. UDP
  B. TCP
  C. HTTP
  D. IP
  E. SSL
  F. ICMP
  G. FTP
  A. UDP
  B. TCP
  D. IP
  F. ICMP

• Question 437:

  Which three options are valid reasons for tuning an IPS? (Choose three.)

  A. As you tune the system to be less restrictive, you decrease the likelihood of false negatives.
  B. Tuning allows for a clearer picture of what is actually going on in the network.
  C. Tuning improves the performance and efficacy of an IPS.
  D. Tuning reduces the occurrence of true negatives.
  E. Tuning assists with prioritizing responses to event information.
  B. Tuning allows for a clearer picture of what is actually going on in the network.
  C. Tuning improves the performance and efficacy of an IPS.
  E. Tuning assists with prioritizing responses to event information.

• Question 438:

  The Cisco OpenDNS dashboard page provides useful and important security information for security analysts. In which section of the dashboard are threats of malware or botnets displayed?

  A. activity volume
  B. message center
  C. top identities
  D. top domains
  B. message center

• Question 439:

  What is a certificate revocation list (CRL)?

  A. A list of root certificates of CA servers that can revoke certificates.
  B. A list of certificates, based on their serial numbers, that had initially been issued by a CA but have not been revoked and are trusted.
  C. A list of certificates, based on their serial numbers, that had initially been issued by a CA but have since been revoked and as a result should not be trusted.
  D. A list of serial numbers of CA servers that can participate in a certificate revocation process.
  C. A list of certificates, based on their serial numbers, that had initially been issued by a CA but have since been revoked and as a result should not be trusted.

• Question 440:

  DRAG DROP

  Match the router preference to the correct routing sequence (most preferred is 1; least preferred is 3).

  Select and Place: