Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 761:

  Where is the UNIX log located?

  A. /var/log
  B. /dev/console
  C. /etc/log
  D. /config/log
  A. /var/log

• Question 762:

  File integrity checking tools work by calculating hash values of important files, storing the hash values, and periodically comparing those hash values to hash values that it calculates later. If a file hash value comparison results in a mismatch, what does that indicate?

  A. It means nothing; it is a mismatch because the files hashes were compiled on different days.
  B. It means that one file did not calculate correctly and need to be recalculated.
  C. It indicates that the file has been changed in some way and there may be an issue to be resolved.
  D. It indicates that your organization has suffered a security breach and a full-scale investigation is needed as soon as possible.
  C. It indicates that the file has been changed in some way and there may be an issue to be resolved.

• Question 763:

  What is the reason that most anti-virus solutions cannot detect zero-day attacks?

  A. It uses anomaly-based detection.
  B. It uses signature-based detection.
  C. It uses behavior-based detection.
  D. It uses a sandbox to run the file.
  B. It uses signature-based detection.

• Question 764:

  What is the difference between IPsec tunnel and transport mode?

  A. Tunnel mode uses encryption and transport mode uses TCP as the transport protocol.
  B. Tunnel mode uses encryption and transport mode uses UDP as the transport protocol.
  C. Transport mode protects upper-layer protocols, such as UDP and TCP, and tunnel mode protects the entire IP packet.
  D. Tunnel mode protects upper-layer protocols, such as UDP and TCP, and transport mode protects the entire IP packet
  C. Transport mode protects upper-layer protocols, such as UDP and TCP, and tunnel mode protects the entire IP packet.

• Question 765:

  How is malware that is not on the whitelist able to execute?

  A. by executing it in memory and injecting malicious code into a legitimate process that is currently running
  B. by changing the register setting
  C. by packing (encrypting or compressing) the file
  D. by executing it using the safe mode
  A. by executing it in memory and injecting malicious code into a legitimate process that is currently running

• Question 766:

  Which of the following is not a method used to pivot a network?

  A. Exploiting a host on the same network
  B. Creating a back door to the network
  C. VLAN hopping
  D. Exploiting a network server
  B. Creating a back door to the network

• Question 767:

  For which purpose can Windows Management Instrumentation be used?

  A. remote start of a computer
  B. remote blocking of malware on a computer
  C. remote viewing of a computer
  D. remote reboot of a computer
  C. remote viewing of a computer

• Question 768:

  What may an increase in IPv4 traffic carrying protocol 41 indicate?

  A. additional PPTP traffic due to Windows clients
  B. deployment of a GRE network on top of an existing Layer 3 network
  C. attempts to tunnel IPv6 traffic through an IPv4 network
  D. unauthorized peer-to-peer traffic
  C. attempts to tunnel IPv6 traffic through an IPv4 network

• Question 769:

  A junior analyst is trying to use the tcpdump -i eth1 command on an Ubuntu system, but it is not working. What could be the problem?

  A. The tcpdump command requires root level privilege.
  B. The tcpdump command requires the Ethernet adapter to be in non-promiscuous mode.
  C. The tcpdump command -i option used to specify the interface is an invalid option.
  D. The tcpdump command used is missing some of the required options (such as -n and -v).
  A. The tcpdump command requires root level privilege.

• Question 770:

  How can SOC analysts use the cyber kill chain?

  A. to gain insight into an attacker's tactics and techniques
  B. to delete detected malware
  C. to prevent all types of cyber attacks
  D. to require attackers to follow all phases of the cyber kill chain in sequence
  E. to implement additional security controls at the network level
  A. to gain insight into an attacker's tactics and techniques