Cisco Cisco Certifications 210-250 Questions & Answers

• Question 851:

  The FMC can share HTML, PDF, and CSV data types that relate to a specific event type. Which event type?

  A. connection

  B. host

  C. intrustion

  D. NetFlow

  Correct Answer: C

• Question 852:

  Which two fields are within an X.509v3 and entity certificate? (Choose two.)

  A. revocation authority for use when the certificate expires

  B. digital signature

  C. public key associated with the certificate authority

  D. public key associated with the subject

  E. private key associated with the certificate authority

  Correct Answer: BD

• Question 853:

  Which two items are useful for investigating security incidents that affect employee laptops? (Choose two.)

  A. SSL remote access VPN configuration

  B. Python script to automate firewall access control lists

  C. antivirus logs

  D. application logs

  E. remote wipe mobile device logs

  Correct Answer: CD

• Question 854:

  Which description is an example of whaling?

  A. when attackers target a group of individuals

  B. when attackers use fraudulent websites that look like legitimate ones

  C. when attackers target specific individuals

  D. when attackers go after the CEO

  Correct Answer: D

• Question 855:

  Which classification of exploit does an attacker use to gain access to a physically-secured device?

  A. remote

  B. local

  C. USB

  D. evil maid

  Correct Answer: A

• Question 856:

  Which evasion method serves as an important functionality of ransomware?

  A. encoding

  B. resource exhaustion

  C. extended sleep calls

  D. encryption

  Correct Answer: D

• Question 857:

  Which security principle is violated by running all processes as root or administrator?

  A. principle of least privilege

  B. separation of duties

  C. role-based access control

  D. trusted computing base

  Correct Answer: A

• Question 858:

  Which evasion method may be in use when TLS is observed between two endpoints?

  A. X.509 certificate authentication

  B. encryption

  C. traffic insertion

  D. tunneling

  Correct Answer: D

• Question 859:

  Which definition of a Linux daemon is true?

  A. process that has no parent process

  B. process that is starved at the CPU

  C. process that is causing harm to the system by either using up system resources or causing a critical crash

  D. long-running process that is the child at the init process

  Correct Answer: D

• Question 860:

  Which two protocols are often used for DDoS amplification attacks? (Choose two.)

  A. DNS

  B. TCP

  C. NTP

  D. ICMPv6

  E. HTTP

  Correct Answer: AB