Cisco Cisco Certifications 210-250 Questions & Answers

• Question 891:

  Which of the following is an example of a traffic substitution and insertion attack?

  A. Inputting more characters than requested

  B. Using functions and classes

  C. Changing spaces with tabs

  D. Inputting wildcard characters

  Correct Answer: C

• Question 892:

  Which of the following is not a defense against a pivot attack?

  A. Content filtering

  B. Proper patch management

  C. Network segmentation

  D. Access control

  Correct Answer: A

• Question 893:

  Which security technology would be best for detecting a pivot attack?

  A. Virtual private network (VPN)

  B. Host-based antivirus

  C. NetFlow solution looking for anomalies within the network

  D. Application layer firewalls

  Correct Answer: C

• Question 894:

  What is SSH used for?

  A. Remote access

  B. To provide a client-based VPN solution for remote users

  C. Managing network equipment remotely

  D. Preventing man-in-the-middle attacks by securing traffic between the client and server

  Correct Answer: D

• Question 895:

  Which of the following is a true statement?

  A. A remote access VPN must include a host installed on the client.

  B. A clientless VPN can connect multiple concentrators together.

  C. A remote access VPN may include a host installed on the client.

  D. A clientless VPN installs software on the host to establish the VPN connection.

  Correct Answer: C

• Question 896:

  Which of the following is not a possible outcome of a resource exhaustion attack?

  A. Corrupting applications by modifying their code

  B. A denial of server on the target system

  C. Bypassing access control security

  D. Causing blackouts in network monitoring

  Correct Answer: A

• Question 897:

  Which of the following is not an example of traffic fragmentation?

  A. Modifying routing tables

  B. Modifying the TCP/IP in a way that is unexpected by security detection devices

  C. Modifying IP headers to cause fragments to overlap D. TCP segmentation

  Correct Answer: A

• Question 898:

  What is the best defense for traffic fragmentation attacks?

  A. Deploying a passive security solution that monitors internal traffic for unusual traffic and traffic fragmentation

  B. Deploying a next-generation application layer firewall

  C. Configuring fragmentation limits on a security solution

  D. Deploying a proxy or inline security solution

  Correct Answer: D

• Question 899:

  Which of the following is a TCP-injection attack?

  A. Forging a TCP packet over an HTTPS session

  B. Replacing legitimate TCP traffic with forged TCP packets

  C. The addition of a forged TCP packet to an existing TCP session

  D. Modifying the TCP/IP in a way that is unexpected by security detection

  Correct Answer: C

• Question 900:

  A traffic substitution and insertion attack does which of the following?

  A. Substitutes the traffic with data in a different format but with the same meaning

  B. Substitutes the payload with data in the same format but with a different meaning, providing a new payload

  C. Substitutes the payload with data in a different format but with the same meaning, not modifying the payload

  D. Substitutes the traffic with data in the same format but with a different meaning

  Correct Answer: C