Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 551:

  Stateful and traditional firewalls can analyze packets and judge them against a set of predetermined rules called access control lists (ACLs). They inspect which of the following elements within a packet?

  A. Session headers
  B. NetFlow flow information
  C. Source and destination ports and source and destination IP addresses
  D. Protocol information
  C. Source and destination ports and source and destination IP addresses
  D. Protocol information

• Question 552:

  Which two IT security control frameworks offer good starting points and can be used together? (Choose two.)

  A. Control Objectives for Information and Related Technologies (COBIT)
  B. Creative Control Systems for Information Security (CCSIS)
  C. Mobility Operations and Optimization Planning Document (MOOP) D. ISO/IEC 27002:2013
  A. Control Objectives for Information and Related Technologies (COBIT)

• Question 553:

  Which one of the following statements best describes the purpose of a default route?

  A. A default route sets the preferred path for multicast packets.
  B. A default route is an optional entry that is used when no explicit path to a destination is found in the routing table.
  C. A default route will flood the packet out of all connected ports.
  D. A default route is just a placeholder in the route table until a new route is found.
  B. A default route is an optional entry that is used when no explicit path to a destination is found in the routing table.

• Question 554:

  What are the three basic security requirements of network security? (Choose three.)

  A. accountability
  B. availability
  C. confidentiality
  D. integrity
  E. visibility
  B. availability
  C. confidentiality
  D. integrity

• Question 555:

  Which statement about the difference between a denial-of-service attack and a distributed denial-of service attack is true?

  A. DDos attacks are lunched from one host, and DOS attacks are lunched from multiple hosts
  B. Dos attacks only use flooding to compromise a network, and DDOS attacks m=only use other methods?
  C. Dos attacks are lunched from one host, and DDOS attacks are lunched from multiple hosts
  D. Dos attacks are launched from one host, and DDOS attacks are lunched from multiple hosts.
  E. Dos attacks and DDOS attacks have no differences?
  D. Dos attacks are launched from one host, and DDOS attacks are lunched from multiple hosts.

• Question 556:

  Where is EAPoL traffic seen?

  A. Between the supplicant and the authentication server
  B. Between the supplicant and the authenticator
  C. Between the authenticator and the authentication server
  D. None of the above
  B. Between the supplicant and the authenticator

• Question 557:

  What is an OVAL definition?

  A. An XML file that contains information about how to check a system for the presence of vulnerabilities.
  B. It is synonymous with the OVAL language
  C. An XML file used to represent reporting on the vulnerability assessment.
  D. A database schema
  A. An XML file that contains information about how to check a system for the presence of vulnerabilities.

• Question 558:

  What is the difference between brute-forcing and password spraying?

  A. Brute-forcing refers to extracting AES keys from memory, and password spraying is attempting all possible passwords from a dictionary of common passwords.
  B. Brute-forcing is calculating the most likely password for a user, based on the user's birthday, anniversary, and children's birthdays. Password spraying means to try every password based on a dictionary.
  C. Brute-forcing is coercing users to give you their password, and password spraying refers to gathering credentials through phishing campaigns.
  D. Brute-forcing is an attempt of every possible password on certain accounts, and password spraying is attempting only a couple common passwords on every possible account.
  D. Brute-forcing is an attempt of every possible password on certain accounts, and password spraying is attempting only a couple common passwords on every possible account.

• Question 559:

  While viewing packet capture data, you notice that one IP is sending and receiving traffic for multiple devices by modifying the IP header. Which option is making this behavior possible?

  A. TOR
  B. NAT
  C. encapsulation
  D. tunneling
  C. encapsulation

• Question 560:

  Which one of the following best describes how a switch processes the traffic, if the switch does not have the MAC address of an endpoint in the MAC address table, and it receives a frame that is destined for that device?

  A. It will flood the frame out all ports, except the one that it arrived on within the VLAN.
  B. It will forward the frame back out the interface that it came in through.
  C. It will drop the frame, because it does not know where to forward it.
  D. It will be sent to all multicast listeners, hoping to find its destination host
  A. It will flood the frame out all ports, except the one that it arrived on within the VLAN.