Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 511:

  What best describes a DoS attack?

  A. attempts to consume all of a critical computer or network resource in order to make it unavailable for valid use
  B. poses as legitimate software or email attachment in order to launch a malicious attack when opened
  C. can steal data such as user names and passwords without the user realizing that they have been compromised
  D. rarely seen because DoS attacks are extremely difficult to engineer and almost impossible to deliver
  A. attempts to consume all of a critical computer or network resource in order to make it unavailable for valid use

• Question 512:

  What is the organizational benefit of incorporating CVSS into risk analysis?

  A. It gives insight into the result of a compromise or attack.
  B. It lowers the threat to detection time.
  C. It is a structured method to assist with prioritizing a vulnerability response.
  D. It makes the engineer read more information than they would have on their own.
  C. It is a structured method to assist with prioritizing a vulnerability response.

• Question 513:

  Which three apply to XSS? (Choose three.)

  A. Malicious scripts are injected into web pages and executed on the client side.
  B. A web application processes an attacker's request using the victim's authenticated session.
  C. Scripting languages used by XSS have security weaknesses.
  D. Clicking an infected link causes a malicious script to run in a background process.
  A. Malicious scripts are injected into web pages and executed on the client side.
  C. Scripting languages used by XSS have security weaknesses.
  D. Clicking an infected link causes a malicious script to run in a background process.

• Question 514:

  What is PHI?

  A. Protected HIPAA information
  B. Protected health information
  C. Personal health information
  D. Personal human information
  B. Protected health information

• Question 515:

  Which three of the following fields are found in a TCP segment? (Choose three.)

  A. source port
  B. window size C. source IP address
  D. payload length
  E. checksum
  A. source port
  B. window size C. source IP address
  E. checksum

• Question 516:

  Which of the following explains Linux daemon permissions?

  A. Daemons get permissions from the init process.
  B. Daemons get permissions from a parent process.
  C. Daemons are always the highest level of permissions.
  D. Daemons and the init are the same thing.
  B. Daemons get permissions from a parent process.

• Question 517:

  Which statement is true about NetFlow?

  A. NetFlow data contains actual packet data and metadata of network conversations.
  B. NetFlow detects traffic anomalies by using NetFlow signatures.
  C. NetFlow provides a complete audit trail of all network communications.
  D. NetFlow alone can provide a security analyst with context for the communication that triggered an IPS signature.
  C. NetFlow provides a complete audit trail of all network communications.

• Question 518:

  What must a user do when making any changes to the logging configuration?

  A. reboot the server
  B. restart the logging service
  C. nothing at all
  D. reset the network connection
  B. restart the logging service

• Question 519:

  What happens when a file hash has never been seen by Cisco's cloud malware analysis system?

  A. An unknown disposition status is returned, and the file is automatically submitted to the cloud for dynamic analysis.
  B. An unknown disposition status is returned, and the file is automatically stored on the local firewall SSD module.
  C. The file is sent directly to Cisco for analysis
  D. A CVE is automatically generated for the file, and uploaded to the cloud for dynamic analysis.
  E. The file is quietly discarded and the end user is alerted to the presence of malware.
  A. An unknown disposition status is returned, and the file is automatically submitted to the cloud for dynamic analysis.

• Question 520:

  Which two of the following options are two key factors in determining the key length requirement? (Choose two.)

  A. Data that is more sensitive and needs to be kept secret longer must use longer keys.
  B. Choose the key length according to the type of encryption algorithm that is to be used.
  C. You should choose the key length so that it protects data confidentiality or integrity for an adequate time.
  D. Key length depends on the support of the device that will be using the key.
  A. Data that is more sensitive and needs to be kept secret longer must use longer keys.
  C. You should choose the key length so that it protects data confidentiality or integrity for an adequate time.