Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 771:

  Which option can lead to an SQL injection attack?

  A. insufficient user input validation
  B. running a database in debugging mode
  C. using GET method instead of POST method when submitting a web form
  D. using * in a SELECT statement
  A. insufficient user input validation

• Question 772:

  How can the SMB worm self-propagate throughout the network?

  A. using Windows Outlook
  B. using Windows file shares
  C. using Windows remote desktop
  D. using Windows PowerShell
  B. using Windows file shares

• Question 773:

  Why can encryption cause problems when you're analyzing data in packet captures?

  A. Because encryption causes fragmentation
  B. Because encryption causes packet loss
  C. Because you cannot see the actual payload of the packet
  D. Because encryption adds overhead to the network, and infrastructure devices cannot scale
  C. Because you cannot see the actual payload of the packet

• Question 774:

  If a router has four interfaces and each interface is connected to four switches, how many broadcast domains are present on the router?

  A. 1
  B. 2
  C. 4
  D. 8
  C. 4

• Question 775:

  At which OSI layer does a router typically operate?

  A. Transport
  B. Network
  C. Data link
  D. Application
  B. Network

• Question 776:

  In an ACL, if a traffic flow is not explicitly permitted, what will be the result of the traffic flow once it has expired testing of all the access control entries in the list?

  A. The traffic will be implicitly permitted.
  B. The traffic will be explicitly permitted.
  C. The traffic will be explicitly denied.
  D. The traffic will be implicitly denied.
  D. The traffic will be implicitly denied.

• Question 777:

  Which one of the following protocols sends data in cleartext?

  A. Telnet
  B. HTTPS
  C. SSH
  D. SCP
  A. Telnet

• Question 778:

  Which two statements are true regarding IPS alerts? (Choose two.)

  A. Security analysts need to be able to filter out false alerts and find any common denominators between the true alerts.
  B. IPS alerts always indicate that an attack is occurring.
  C. IPS alerts are only part of the picture; security analysts also need to correlate IPS alerts with other data.
  D. IPS alerts can always identify the true attacker by using signature file and security intelligence feeds.
  A. Security analysts need to be able to filter out false alerts and find any common denominators between the true alerts.
  C. IPS alerts are only part of the picture; security analysts also need to correlate IPS alerts with other data.

• Question 779:

  Which TCP flag is used to initiate a graceful termination of a TCP connection?

  A. RST
  B. FIN
  C. ACK
  D. SYN
  E. URG
  F. PSH
  B. FIN

• Question 780:

  Which of the following are true statements regarding vulnerability scanners and penetration assessments? (Select all that apply.)

  A. Vulnerability scanners can crash a device; penetration assessments do not.
  B. Vulnerability scanners usually work with known vulnerabilities.
  C. Penetration assessment is typically fully automated.
  D. Vulnerability scanners can work in active mode and passive mode.
  B. Vulnerability scanners usually work with known vulnerabilities.
  D. Vulnerability scanners can work in active mode and passive mode.