Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 531:

  You are investigating IPS alerts and finding that many of them have been generated by normal network activity. What is most likely to be the cause of this situation?

  A. The IPS is running in promiscuous mode.
  B. Reactive controls are too specific.
  C. Proactive controls are too restrictive.
  D. All IPS signatures have been assigned the Produce Alert action.
  C. Proactive controls are too restrictive.

• Question 532:

  DRAG DROP

  The structure of an APT attack does not follow a blueprint, but there is a common methodology to the attack. Match the attack steps to their description:

  Select and Place:

  

  

• Question 533:

  Where is the information about ports and device Layer 2 addresses kept in a switch?

  A. MAC address table
  B. Routing table
  C. L2 address table
  D. Port table
  A. MAC address table

• Question 534:

  Which routing protocol exchanges link state information?

  A. RIPv2
  B. RIP
  C. OSPF
  D. BGP
  C. OSPF

• Question 535:

  When using DHCP with LWAP devices, which one of the following is option 43 used for?

  A. to identify the default gateway
  B. to assign a fallback IP address
  C. to supply the specific WLAN controllers IP address
  D. to supply the specific NAME server IP address
  C. to supply the specific WLAN controllers IP address

• Question 536:

  

  Refer to the exhibit. A TFTP server has recently been installed in the Atlanta office. The network administrator is located in the NY office and has attempted to make a connection to the TFTP server. They are unable to backup the configuration file and Cisco IOS of the NY router to the TFTP server. Which cause of this problem is true?

  A. The TFTP server cannot obtain an address from a DHCP Server
  B. The TFTP server has an incorrect IP address.
  C. The network administrator computer has an incorrect IP address.
  D. The TFTP server has an incorrect subnet mask.
  A. The TFTP server cannot obtain an address from a DHCP Server

• Question 537:

  What is a chronological documentation of evidence also known as?

  A. chain of custody
  B. forensic analysis
  C. investigative custodial control
  D. custody control
  A. chain of custody

• Question 538:

  What is the maximum value that can be represented in any octet of an IP address or subnet mask?

  A. 126
  B. 255
  C. 256
  D. 128
  B. 255

• Question 539:

  What do you need to do in order to ensure that a Sysinternal tool runs properly on a Windows system?

  A. open the Sysinternal tool as administrator
  B. uninstall the corresponding Windows tool before installing the Sysinternal tool
  C. run the Sysinternal tool when logged in as a user with a privilege level of 10 or higher
  D. use control panel to uninstall the corresponding Windows tool, then reboot the system before installing the Sysinternal tool
  A. open the Sysinternal tool as administrator

• Question 540:

  DRAG DROP

  Drag the data source on the left to the correct data type on the right.

  Select and Place: