Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 921:

  What are the two primary purposes of the intrusion analysis process? (Choose two.)

  A. blocking attacks
  B. identifying attacks
  C. filtering out unnecessary, unwanted, or inaccurate event data
  D. troubleshooting IPS device issues
  E. collecting information about all the network traffic
  A. blocking attacks
  B. identifying attacks

• Question 922:

  Which Windows component is used by the applications to modify the system resources?

  A. process thread
  B. task manager
  C. Windows registry
  D. object handle
  D. object handle

• Question 923:

  Which two countermeasures reduce the threat of CSRF? (Choose two.)

  A. Educate users to recognize possible phishing attacks.
  B. Deny access to the public Internet from workstations and laptops.
  C. Visit the OWASP.org web site for up-to-date information and guidance on developing web content.
  D. Implement a proxy server solution for users that access the Internet.
  A. Educate users to recognize possible phishing attacks.
  C. Visit the OWASP.org web site for up-to-date information and guidance on developing web content.

• Question 924:

  What is the relative distinguished name at the organizational unit level of the following entity? C=US, O=Cisco, OU=CCNA Learning, CN=Jones?

  A. OU=CCNA Learning
  B. C=US, O=Cisco, OU=CCNA Learning
  C. CN=Jones
  D. OU=CCNA Learning, CN=Jones
  A. OU=CCNA Learning

• Question 925:

  How does DNS security combat CnC callbacks?

  A. By filtering DNS requests, it blocks all requested zone transfers.
  B. By changing the DNS MX field, CnC systems cannot be reached on the outbound connection.
  C. By implementing DNS security measures, CnC callbacks over any ports and protocols are blocked when the DNS queries to any bad or malicious domains are prevented.
  D. Using openDNS servers, such as Google openDNS (8.8.8.8), DNS requests are filtered based on the IP reputation tables that are maintained.
  E. By configuring clients to use cloud-based DNS services, CnC callbacks are originated only in the cloud.
  C. By implementing DNS security measures, CnC callbacks over any ports and protocols are blocked when the DNS queries to any bad or malicious domains are prevented.

• Question 926:

  Which two actions are valid uses of public key infrastructure? (Choose two.)

  A. ensuring the privacy of a certificate
  B. revoking the validation of a certificate
  C. validating the authenticity of a certificate
  D. creating duplicate copies of a certificate
  E. changing ownership of a certificate
  B. revoking the validation of a certificate
  C. validating the authenticity of a certificate

• Question 927:

  After a file disposition changes from unknown to malicious, what is the next step that should be taken?

  A. Run the file in a sandbox to verify if it is malicious and to determine the file behaviors.
  B. Create a new IPS signature to detect the malicious file.
  C. Go back to the system where the file was previously seen and quarantine the malicious file.
  D. Run a file retrospective analysis in the cloud using machine learning to determine the file SHA.
  C. Go back to the system where the file was previously seen and quarantine the malicious file.

• Question 928:

  What command can a user enter to retrieve detailed information about the owner of a registered IP address?

  A. ifconfig
  B. whois
  C. whereis
  D. nslookup
  B. whois

• Question 929:

  How can an organization protect against a privilege escalation attack?

  A. Use a common password for multiple accounts so the users do not need to write it down on a sticky note at their desk.
  B. Exercise a strong password policy that includes the requirement of unique passwords for multiple accounts.
  C. Assign new passwords to employees every 30 days.
  D. Use open authentication on wireless and guest networks.
  B. Exercise a strong password policy that includes the requirement of unique passwords for multiple accounts.

• Question 930:

  DRAG DROP

  Match the operation to its correct order in the email process.

  Select and Place: