Cisco Cisco Certifications 210-250 Questions & Answers

• Question 881:

  Which purpose of a security risk assessment is true?

  A. Score a vulnerability.

  B. Notify the customer of a vulnerability.

  C. Find implementation issues that could lead to a vulnerability.

  D. Set the SIR value of a vulnerability.

  Correct Answer: C

• Question 882:

  In which context is it inappropriate to use a hash algorithm?

  A. SSH logins

  B. verifying file integrity

  C. Telnet logins

  D. digital signature verification

  Correct Answer: C

• Question 883:

  Which of the following is not a method used to pivot a network?

  A. Exploiting a host on the same network

  B. Creating a back door to the network

  C. VLAN hopping

  D. Exploiting a network server

  Correct Answer: B

• Question 884:

  Which is the best answer to explain why Cisco Identity Services Engine would reduce the risk of pivoting to a higher, trusted network?

  A. ISE ensures systems have the latest antivirus updates prior to permitting access to the network.

  B. ISE can unify and enforce the LAN, wireless, and VPN access control policies into one secure policy.

  C. ISE can profile devices, providing greater detail on which ones can access what resources.

  D. ISE enforces network segmentation

  Correct Answer: D

• Question 885:

  Which network device repeats frames out of all ports without filtering, regardless of destination?

  A. switch

  B. router

  C. hub

  D. bridge

  Correct Answer: C

• Question 886:

  Which Layer 2 protocol can be subverted by erroneous entries?

  A. DHCP

  B. uRPF

  C. ARP

  D. DNS

  Correct Answer: C

• Question 887:

  Which purpose of the certificate revocation list is true?

  A. Provide a list of certificates that are untrusted regardless of other validity markers.

  B. Provide a list of certificates that are trusted regardless of other validity markers.

  C. Provide a list of certificates used in the chain of trust.

  D. Provide a list of alternate device identifiers.

  Correct Answer: A

• Question 888:

  Which of the following is not a technique used to confuse an IPS from assembling fragmenting packets?

  A. Encrypting traffic

  B. TCP segmentation and reordering attack

  C. Overlapping fragments

  D. Sending traffic in very slow method

  Correct Answer: A

• Question 889:

  Which of the following is the best of an overlapping fragment attack?

  A. This attack works by setting the offset values in the IP header to match up, causing one fragment to overlap another.

  B. This attack works by setting the TCP values in the IP header to not match up, causing one fragment to overlap another.

  C. This attack works by setting the UDP values in the IP header to match up, causing one fragment to overlap another.

  D. This attack works by setting the offset values in the IP header to not match up, causing one fragment to overlap another

  Correct Answer: D

• Question 890:

  Which of the following best describes a timing attack?

  A. Sending a ton of traffic to render the system or data useless

  B. Sending traffic in a method that is slower than the system can accept

  C. Sending traffic slowly enough where the system can accept it but overlooks it

  D. Sending the traffic over different protocols

  Correct Answer: C