Cisco 210-250 Online Practice Questions and Exam Preparation

Cisco 210-250 Online Questions & Answers

• Question 971:

  How many broadcast domains are created if three hosts are connected to a Layer 2 switch in full-duplex mode?

  A. 4
  B. 3
  C. None
  D. 1
  D. 1

• Question 972:

  What is an application blacklist?

  A. A list of different entities that have been determined to be malicious
  B. A list of different entities that have been determined to be false positives
  C. A list of different malicious websites and hosts
  D. A list of different domains that are known to host malware
  A. A list of different entities that have been determined to be malicious

• Question 973:

  Typically, by which two methods are APTs often achieved? (Choose two.)

  A. using multiple attack vectors
  B. maintaining a short presence in the network to avoid detection
  C. following the same exact kill-chain sequence
  D. exploiting "zero-day" vulnerabilities
  A. using multiple attack vectors
  D. exploiting "zero-day" vulnerabilities

• Question 974:

  What is one of the main causes of successful buffer overflow attacks?

  A. careless users violating acceptable use policy
  B. poorly written application code that does not validate input data size
  C. intentional installation of illegitimate software
  D. bad luck of the user who falls victim to such an attack
  B. poorly written application code that does not validate input data size

• Question 975:

  Within a Snort rule, which one of the following statements best describes an event trigger?

  A. The IPS engine compares a packet against the defined rules, and if that packets data matches all the conditions, then an event is triggered signaling a potential issue.
  B. Events are triggered when the defined conditions partially match, causing the IPS engine to fire an alert.
  C. An event is triggered only after the IPS engine compares the packet payloads against the known reputation database lists.
  D. An event is triggered only after the IPS engine compares the header fields against the known reputation database lists.
  E. Snort rules are not designed to trigger network alerts.
  A. The IPS engine compares a packet against the defined rules, and if that packets data matches all the conditions, then an event is triggered signaling a potential issue.

• Question 976:

  Which of the following is not a NetFlow version?

  A. Version 5
  B. Version 7
  C. Version 9
  D. IPFIX
  D. IPFIX

• Question 977:

  What is the difference between a handle and pointer?

  A. A handle is an abstract reference to a value, whereas a pointer is a direct reference.
  B. A pointer is an abstract reference to a value, whereas a handle is a direct reference.
  C. A pointer is a reference to a handle.
  D. A handle is a reference to a pointer.
  A. A handle is an abstract reference to a value, whereas a pointer is a direct reference.

• Question 978:

  Which type of attack forces a machine to respond to a SYN message by sending a packet to itself on the same port it received the SYN?

  A. smurf
  B. land attack
  C. amplification attack
  D. reflection attack
  B. land attack

• Question 979:

  What is used by a router to make traffic forwarding decisions at Layer 3?

  A. MAC address table
  B. routing table
  C. DSCP mutation table
  D. QoS information in the TCAM
  B. routing table

• Question 980:

  What is an example of a Cisco solution for endpoint protection?

  A. Cisco ASA
  B. Cisco ESA
  C. Cisco AMP for Endpoints
  D. Firepower Endpoint System
  C. Cisco AMP for Endpoints