Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 881:

  What is the primary reason to use a sandbox to analyze unknown suspicious files?

  A. to determine exactly what a file does before it is labeled malicious or benign
  B. to block any suspected malware in real time before it can inflect the end user
  C. to provide evidence for post-incident forensics reports
  D. to run it in a production environment to see its effects
  A. to determine exactly what a file does before it is labeled malicious or benign

• Question 882:

  What is the primary goal of an attacker when using an iFrame or HTTP 302 cushioning?

  A. help the user find the correct web page location
  B. ensure that the victim's web browser ends up on the attacker's web page, which serves out the malicious exploit to the victim
  C. offer a secure transaction in a web page
  D. protect against malware infiltration
  B. ensure that the victim's web browser ends up on the attacker's web page, which serves out the malicious exploit to the victim

• Question 883:

  Which step is first in the certificate process when an organization wants a signed certificate to use?

  A. Request a root certificate
  B. Request a certificate revocation list
  C. Create a certificate signing request
  D. Request an OCSP service
  C. Create a certificate signing request

• Question 884:

  What is the best way to manage personally identifiable information (PII) data?

  A. back it up on a local hard drive
  B. apply confidentiality processes when handling it
  C. use mandatory access control to secure it
  D. sign it using a digital signature
  B. apply confidentiality processes when handling it

• Question 885:

  Which one of the following options is most used by multilayer switches to allow for wire-speed switching?

  A. label switching
  B. high-speed CPU and huge amount of memory
  C. specialized ASIC hardware
  D. distributed switching using multiple MAC address table
  C. specialized ASIC hardware

• Question 886:

  Which two statements are true about malvertisements? (Choose two.)

  A. Malvertisements are sometimes set up to affect all visitors to a site only during a specific period of time.
  B. Malvertisements' malicious code remains forever.
  C. Malvertisements affect both trustworthy and untrustworthy sites.
  D. Infection only occurs when the victim clicks a malvertisement.
  A. Malvertisements are sometimes set up to affect all visitors to a site only during a specific period of time.
  C. Malvertisements affect both trustworthy and untrustworthy sites.

• Question 887:

  Which of the following is not an SSL VPN technology or feature?

  A. Reverse proxy features
  B. Port-forwarding technology and smart tunnels
  C. NAT Traversal
  D. SSL VPN tunnel client (AnyConnect Secure Mobility Client)
  C. NAT Traversal

• Question 888:

  Which of the following features are implemented by a wireless LAN controller? (Select all that apply.)

  A. Wireless station authentication
  B. Quality of Service
  C. Channel encryption
  D. Transmission and reception of frames
  A. Wireless station authentication
  B. Quality of Service

• Question 889:

  Which of the following authentication methods can be considered examples of authentication by knowledge? (Select all that apply.)

  A. Password
  B. Token
  C. PIN
  D. Fingerprint
  A. Password

• Question 890:

  What is a SQL injection vulnerability?

  A. A type of vulnerability where an attacker can insert or "inject" a SQL query via the input data from the client to the application or database
  B. A type of vulnerability where an attacker can "inject" a new password to a SQL server or the client
  C. A type of DoS vulnerability that can cause a SQL server to crash
  D. A type of privilege escalation vulnerability aimed at SQL servers
  A. A type of vulnerability where an attacker can insert or "inject" a SQL query via the input data from the client to the application or database