Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 701:

  Which network device repeats frames out of all ports without filtering, regardless of destination?

  A. switch
  B. router
  C. hub
  D. bridge
  C. hub

• Question 702:

  What are worms?

  A. A type of malware that compromises a system and then often demands a ransom from the victim to pay the attacker in order for the malicious activity to cease or for the malware to be removed from the affected system.
  B. Viruses that replicate themselves over the network, infecting numerous vulnerable systems. On most occasions, a worm will execute malicious instructions on a remote system without user interaction.
  C. An exploit of a network infrastructure device vulnerability that installs a backdoor on the affected system.
  D. An exploit of a firewall vulnerability that installs a backdoor on the affected system.
  B. Viruses that replicate themselves over the network, infecting numerous vulnerable systems. On most occasions, a worm will execute malicious instructions on a remote system without user interaction.

• Question 703:

  What is the primary difference between a host-based firewall and a traditional firewall?

  A. The host-based firewall can block traffic based on application or file type.
  B. The traditional firewall can identify and protect against malicious HTTP exploits.
  C. There is no difference between the functional aspects of host-based and traditional firewalls.
  D. Host-based firewalls protect an individual machine while traditional firewalls control traffic arriving at and leaving networks.
  D. Host-based firewalls protect an individual machine while traditional firewalls control traffic arriving at and leaving networks.

• Question 704:

  Which IP address can be used by a host to establish an IP connection to itself for testing purposes?

  A. 127.0.0.1
  B. 1.1.1.1
  C. 0.0.0.0
  D. 255.255.255.255
  A. 127.0.0.1

• Question 705:

  Which security technology allows only a set of pre-approved applications to run on a system?

  A. application-level blacklisting
  B. host-based IPS
  C. antivirus
  D. application-level whitelisting
  D. application-level whitelisting

• Question 706:

  Which form of NAT uses port addresses to distinguish between translated sessions?

  A. static NAT
  B. policy NAT
  C. dynamic PAT
  D. dynamic NAT
  C. dynamic PAT

• Question 707:

  Why is malware that runs as a Windows service more difficult for the average end user to detect?

  A. because services run in the background and do not interact with the users
  B. because services run in the Kernel mode
  C. because services run in the User mode
  D. because all services run automatically when the system boots up
  A. because services run in the background and do not interact with the users

• Question 708:

  Referring to the nslookup results that is shown below, which two statements are correct? (Choose two.)

  

  A. 98.139.183.24 is one of the DNS servers.
  B. 98.139.180.149 is one of the authoritative DNS servers for www.yahoo.com.
  C. 192.168.1.2 is the DNS server IP address.
  D. From this host, browsing to www.facebook.com will probably fail.
  C. 192.168.1.2 is the DNS server IP address.
  D. From this host, browsing to www.facebook.com will probably fail.

• Question 709:

  Which one of the following options does the established keyword in an ACL entry indicate?

  A. The established keyword function has been deprecated and no longer serves as a functional configuration element.
  B. Reply packets that belong to an established TCP connection will be permitted if the TCP packet has the ACK or RST bit set.
  C. Reply packets that belong to an established TCP connection will be permitted if the TCP packet has the SYN or FIN bit set.
  D. The device interface will modify the source IP address to that of the interface that it enters through.
  B. Reply packets that belong to an established TCP connection will be permitted if the TCP packet has the ACK or RST bit set.

• Question 710:

  Which of the following is a password system that's based on tokens and uses a challenge-response mechanism?

  A. Synchronous token system
  B. Asynchronous token system
  C. One-time token system
  D. Time-base token system
  B. Asynchronous token system