Cisco Cisco Certifications 210-250 Questions & Answers

• Question 781:

  Which example of phishing is true?

  A. to trick user into thinking that an email communication comes from a legitimate entity

  B. to convince an employee to give you access to a restricted area

  C. to search for trade secrets in the trash of a target organization

  D. type of malware that compromises a system

  Correct Answer: A

• Question 782:

  Which type of attack tricks the victim user into giving the attacker privileged access to a resource?

  A. cross-site scripting

  B. social engineering

  C. smurf attack

  D. denial of service

  Correct Answer: B

• Question 783:

  Which description of a function of a symmetric encryption algorithm is true?

  A. Symmetric encryption algorithms can be used to generate a certificate request to a certificate authority.

  B. It uses the same key to encrypt and decrypt data.

  C. It uses one way hashing functions to encrypt and decrypt data.

  D. Encrypted data can be shared among various parties without sharing the key.

  Correct Answer: B

• Question 784:

  Which utility is the best to block a host portscan?

  A. host-based firewall

  B. antimalware

  C. HIDS

  D. sandboxing

  Correct Answer: A

• Question 785:

  Which tool do you use to determine if a specific user logged in to a Windows system?

  A. Performance Monitor

  B. Registry Editor

  C. Local Security Policy

  D. Event Viewer

  Correct Answer: D

• Question 786:

  Which definition of Common Event Format in terms of a Security Information and Event Management solution is true?

  A. event log analysis certificate that stands for Certified Event Forensics

  B. a TCP network media protocol

  C. a standard log event format that is used for log collection

  D. a type of event log used to identify a successful user login

  Correct Answer: C

• Question 787:

  Which three common tasks must be performed in enterprise security risk assessment? (Choose three.)

  A. Restrict access rights for applications, systems, processes, and devices to only those permissions needed to perform authorized activities.

  B. Analyze assets, threats, and vulnerabilities, including their impacts and likelihood.

  C. Remove the ability to access lab equipment remotely.

  D. Review current level of security awareness and commitment of staff within organization.

  E. Change all user passwords older than 6 months.

  F. Evaluate physical applied to computing equipment and other network components.

  Correct Answer: BDF

• Question 788:

  Which type of attack is used to eavesdrop on a conversation between two victims?

  A. distributed overflow

  B. buffer overflow

  C. cross-site scripting

  D. man-in-the-middle

  Correct Answer: D

• Question 789:

  Which Linux command allows you to determine if a specific process is running?

  A. ps

  B. watch

  C. find

  D. netstat

  Correct Answer: A

• Question 790:

  

  Refer to the exhibit. Which of these does the exhibit demonstrate?

  A. asymmetric encryption algorithm

  B. compute a message digest

  C. symmetric encryption algorithm

  D. generating a public and private key pair

  Correct Answer: B