Cisco Cisco Certifications 210-250 Questions & Answers

• Question 761:

  What is a key security benefit when using identity and access management for authorization posturing services?

  A. The user device is assigned a log key, which eliminates the need to authenticate the user or device when accessing the network.

  B. The posturing service enables endpoint camera services to validate user identity.

  C. The user will be provided different levels of access and service based on the device they are using when they enter their authentication credentials.

  D. Authenticated devices allow multiple users to access network services using the same user authentication credentials.

  Correct Answer: C

• Question 762:

  A foreign government attacks your defense weapons contractor and stole intellectual property, that foreign government is defined as what?

  A. Defense Weapons Contractor who stole intellectual property

  B. Foreign government who conduct attack

  C. Intellectual property got stolen

  D. Method used by foreign government to hack

  Correct Answer: B

• Question 763:

  Which one of the following statements best describes the benefit of following the phases of the attack continuum?

  A. Organizations are able to combat advanced persistent threats by having visibility and control across the extended network.

  B. Organizations can use the attack continuum to provide a complete security posture, which will block and prevent all nefarious network activity and attacks

  C. Organizations using the attack continuum are able to easily determine the identity of threat actors and the nature of their activities.

  D. It is the first level of security for BYOD-based devices (including end-user phones, tablets, and personal computers) when they are connected to the enterprise environment.

  Correct Answer: A

• Question 764:

  Which one of the following best describes the limitations of local AAA databases?

  A. User names, passwords, and credentials must be synchronized with a TACACS+/RADIUS server.

  B. Scalability issues force network admins to enter user name credentials into each network device.

  C. While it supports accounting, it does not meet the requirements for large persistent storage.

  D. Authorization policies that are created with local AAA databases cannot be synchronized and made available to all the devices across the network.

  Correct Answer: B

• Question 765:

  Networks and computer systems employ defense-in-depth strategies to prevent a compromise. Which option best describes defense-in-depth strategies?

  A. provide end-to-end security controls and mechanisms

  B. provide attackers the ability to understand which types of security controls are in place

  C. apply a layered approach to a set of systems or networks, by employing multiple security controls

  D. eliminate single points of failure

  Correct Answer: C

• Question 766:

  What is a byproduct when defense-in-depth strategies are not applied to network architecture design?

  A. An attacker will have a single point of entry into a system.

  B. Weaknesses in the security posture, such as weak passwords or unpatched software, provide multiple avenues to attack the network.

  C. Weak firewall rule-sets make it easier for attackers to compromise the network.

  D. There is no byproduct of weak defense-in-depth strategies.

  Correct Answer: B

• Question 767:

  What input validation can a program perform to prevent buffer overflow attacks?

  A. Data input size matches what system has allocated.

  B. User has administrative rights to install programs.

  C. whether the input was downloaded from the Internet

  D. Data input is not from a command line argument.

  Correct Answer: A

• Question 768:

  What type of data can be learned about a server by performing a basic port scan on it with nmap?

  A. list of patches missing from applications

  B. misconfigurations of web applications allowing command injection

  C. list of all open ports and services that are running

  D. list of all systems that the server is communicating with

  E. list of users who are logged on to the server

  Correct Answer: C

• Question 769:

  What is the order in which reconnaissance scanning typically occurs? The correct choice also shows the order from least detail to most detail obtained for each system.

  A. DNS registry info, vulnerability scan, port scan, ping sweep

  B. vulnerability scan, ping sweep, DNS registry info, port scan

  C. DNS registry info, ping sweep, port scan, vulnerability scan

  D. ping sweep, port scan, vulnerability scan, DNS registry info

  Correct Answer: C

• Question 770:

  Which two statements about client-side web-based attacks are true? (Choose two.)

  A. Attackers use clear and plain text to access the resources they desire to access.

  B. Attackers use obfuscation to hide a URL within a message so the user will not notice the true URL.

  C. Attackers rarely perform client-side web-based attacks because they have found easier and more effective ways to perform attacks.

  D. Attackers use many tricks to fool the user into clicking on a URL link to a nefarious website.

  Correct Answer: BD