Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 81:

  Which situation for agentless protection is more ideal?

  A. when mobile devices are used on the network but not present in the infrastructure all of the time
  B. when using an agent that is not compatible with the underlying operating system
  C. when desktop computers are present on the network and remain there
  D. when you have wireless devices within the network and they are present some of the time
  C. when desktop computers are present on the network and remain there

• Question 82:

  Which two of the following statements are true about malware protection? (Choose two.)

  A. Malware protection at the host installation level is useless and can only be performed at the network level.
  B. Modern products for malware detection can achieve close to 100 percent success in detection.
  C. Antivirus and antispyware tools provide a line of defense, but their efficacy is dropping.
  D. Antivirus and antispyware tools primarily work after the infection has occurred.
  E. A combination of an antivirus product and an antispyware product provides the best defense against malware.
  C. Antivirus and antispyware tools provide a line of defense, but their efficacy is dropping.
  D. Antivirus and antispyware tools primarily work after the infection has occurred.

• Question 83:

  What can be used to make a malicious file to appear to have 0 byte size in the dir command output?

  A. using AES to encrypt the file
  B. using winzip to compress the file
  C. using the Master File Table to alter the true file size
  D. using NTFS Alternate Data Streams to attach the data to the file
  D. using NTFS Alternate Data Streams to attach the data to the file

• Question 84:

  Which two tasks can be performed by analyzing the logs of a traditional stateful firewall? (Choose two.)

  A. Confirm the timing of network connections differentiated by the TCP 5-tuple.
  B. Audit the applications used within a social networking web site.
  C. Determine the user IDs involved in an instant messaging exchange.
  D. Map internal private IP addresses to dynamically translated external public IP addresses.
  E. Identify the malware variant carried by an SMTP connection
  A. Confirm the timing of network connections differentiated by the TCP 5-tuple.
  D. Map internal private IP addresses to dynamically translated external public IP addresses.

• Question 85:

  The Cisco CWS service uses web proxies in the Cisco cloud environment that scan traffic for malware and policy enforcement. Cisco customers can connect to the Cisco CWS service directly by using a proxy auto-configuration (PAC) file in the user endpoint or through connectors integrated into which of the following Cisco products?

  A. Cisco ISR G2 routers
  B. Cisco ASA
  C. Cisco WSA
  D. Cisco AnyConnect Secure Mobility Client
  A. Cisco ISR G2 routers
  B. Cisco ASA
  C. Cisco WSA
  D. Cisco AnyConnect Secure Mobility Client

• Question 86:

  Which of the following are examples of sandboxing implementations?

  A. Google Chromium sandboxing
  B. Java Virtual Machine (JVM) sandboxing
  C. HTML CSS and JavaScript sandboxing
  D. HTML5 "sandbox" attribute for use with iframes
  A. Google Chromium sandboxing
  B. Java Virtual Machine (JVM) sandboxing
  D. HTML5 "sandbox" attribute for use with iframes

• Question 87:

  On which OSI layer or layers does ARP operate?

  A. between Layer 2 and Layer 3
  B. at Layer 2
  C. at Layer 3
  D. between Layer 1 and Layer 2
  A. between Layer 2 and Layer 3

• Question 88:

  Which file is an executable used to troubleshoot DNS issues?

  A. /etc/hosts
  B. /usr/bin/nslookup
  C. /bin/resolve
  D. /sys/domain/lookup
  B. /usr/bin/nslookup

• Question 89:

  What is the maximum number of hosts that a network with a subnet mask of /26 can have?

  A. 54
  B. 56
  C. 62
  D. 64
  C. 62

• Question 90:

  Which definition of Common Event Format in terms of a Security Information and Event Management solution is true?

  A. event log analysis certificate that stands for Certified Event Forensics
  B. a TCP network media protocol
  C. a standard log event format that is used for log collection
  D. a type of event log used to identify a successful user login
  C. a standard log event format that is used for log collection