Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 911:

  Risk is a function of which three factors? (Choose three.)

  A. threat
  B. cost of security solution
  C. vulnerabilities
  D. impact
  E. deployment time
  F. support costs
  A. threat
  C. vulnerabilities
  D. impact

• Question 912:

  What is the Windows eventvwr command used for?

  A. to investigate network connectivity problems
  B. to investigate applications and Windows security problems
  C. to investigate problems with the Windows registry
  D. to investigate Windows SMB operations
  B. to investigate applications and Windows security problems

• Question 913:

  What is the destination port defined in the DHCP Discover message?

  A. 66 UDP
  B. 66 TCP
  C. 67 TCP
  D. 67 UDP
  D. 67 UDP

• Question 914:

  Which statement about an attack surface is true?

  A. It is the sum of all paths for data/commands into and out of the application.
  B. It is an exploitable weakness in a system of its design.
  C. It is the individuals who perform an attack.
  D. It is any potential danger to an asset.
  A. It is the sum of all paths for data/commands into and out of the application.

• Question 915:

  What NGFW feature supports inspection of SSL-based traffic?

  A. user or user group policies
  B. intelligent security automation, correlating different event data and payloads
  C. ESP packet payload enforcement policies
  D. SSL/TLS traffic flow analysis
  E. malware protection
  D. SSL/TLS traffic flow analysis

• Question 916:

  Which of the following statements are true about application proxies?

  A. Application proxies, or proxy servers, are devices that operate as intermediary agents on behalf of clients that are on a private or protected network.
  B. Clients on the protected network send connection requests to the application proxy to transfer data to the unprotected network or the Internet.
  C. Application proxies can be classified as next-generation firewalls.
  D. Application proxies always perform network address translation (NAT).
  A. Application proxies, or proxy servers, are devices that operate as intermediary agents on behalf of clients that are on a private or protected network.
  B. Clients on the protected network send connection requests to the application proxy to transfer data to the unprotected network or the Internet.

• Question 917:

  If an attacker uses phishing to obtain user credentials for an employee without administrator access and needs to install a rootkit backdoor that requires system level access, what might be the attacker's next course of action to gain the administrator privileges?

  A. set a scheduled task to install the rootkit the following day under the current user account
  B. try to brute force that user's password for an RDP connection to the user's workstation
  C. change the IP address of the user's computer from DHCP-assigned to static.
  D. attempt to extract local administrator credentials stored on the machine in running memory or the registry
  D. attempt to extract local administrator credentials stored on the machine in running memory or the registry

• Question 918:

  In which phase of the identity and account lifecycle are the access rights assigned?

  A. Registration
  B. Access review
  C. Privileges provisioning
  D. Identity validation
  C. Privileges provisioning

• Question 919:

  Which two statements are true about DDNS? (Choose two.)

  A. Attackers dislike using DDNS due to its inflexibility.
  B. DDNS is a popular choice for home users who wish to host a website.
  C. Clients often use DHCP to communicate to the DDNS provider.
  D. DDNS is useful in residential networks because the IP subnets don't change.
  E. DDNS is often used by attackers for CnC servers.
  B. DDNS is a popular choice for home users who wish to host a website.
  E. DDNS is often used by attackers for CnC servers.

• Question 920:

  What can a HIPS do that a NIPS cannot? (Choose two.)

  A. Detect malware delivered to the host via an encrypted channel.
  B. Protect a mobile host while connected to non-secured networks.
  C. Block malware as it is carried across the network.
  D. Inspect traffic crossing a link in the network.
  A. Detect malware delivered to the host via an encrypted channel.
  B. Protect a mobile host while connected to non-secured networks.