Cisco 600-199 Online Practice Questions and Exam Preparation

Cisco 600-199 Online Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  Which DNS Query Types pertains to email?

  A. A?
  B. NS?
  C. SOA?
  D. PTR?
  E. MX?
  F. TXT?
  E. MX?

• Question 22:

  Which attack exploits incorrect boundary checking in network software?

  A. Slowloris
  B. buffer overflow
  C. man-in-the-middle
  D. Smurf
  B. buffer overflow

• Question 23:

  In the context of a network security device like an IPS, which event would qualify as having the highest severity?

  A. remote code execution attempt
  B. brute force login attempt
  C. denial of service attack
  D. instant messenger activity
  A. remote code execution attempt

• Question 24:

  Refer to the exhibit.

  

  Based on the traffic captured in the tcpdump, what is occurring?

  A. The device is powered down and is not on the network.
  B. The device is reachable and a TCP connection was established on port 23.
  C. The device is up but is not responding on port 23.
  D. The device is up but is not responding on port 51305.
  E. The resend flag is requesting the connection again.
  C. The device is up but is not responding on port 23.

• Question 25:

  Refer to the exhibit.

  

  In the packet captured from tcpdump, which fields match up with the lettered parameters?

  A. A. Source and destination IP addresses, B. Source and destination Ethernet addresses, C. Source and destination TCP port numbers, D. TCP acknowledgement number, E. IP options
  B. A. Source and destination Ethernet addresses, B. Source and destination IP addresses, C. Source and destination TCP port numbers, D. TCP sequence number, E. TCP options
  C. A. Source and destination Ethernet addresses, B. Source and destination IP addresses, C. Source and destination TCP port numbers, D. TCP acknowledgement number, E. IP options
  D. A. Source and destination Ethernet addresses, B. Source and destination IP addresses, C. Source and destination TCP port numbers, D. TCP sequence number, E. IP options
  B. A. Source and destination Ethernet addresses, B. Source and destination IP addresses, C. Source and destination TCP port numbers, D. TCP sequence number, E. TCP options

• Question 26:

  Which three statements are true about the IP fragment offset? (Choose three.)

  A. A fragment offset of 0 indicates that it is the first in a series of fragments.
  B. A fragment offset helps determine the position of the fragment within the reassembled datagram.
  C. A fragment offset number refers to the number of fragments.
  D. A fragment offset is measured in 8-byte units.
  E. A fragment offset is measured in 16-byte units.
  A. A fragment offset of 0 indicates that it is the first in a series of fragments.
  B. A fragment offset helps determine the position of the fragment within the reassembled datagram.
  D. A fragment offset is measured in 8-byte units.

• Question 27:

  Which protocol is typically considered critical for LAN operation?

  A. BGP
  B. ARP
  C. SMTP
  D. GRE
  B. ARP

• Question 28:

  Which two types of data are relevant to investigating network security issues? (Choose two.)

  A. NetFlow
  B. device model numbers
  C. syslog
  D. routing tables
  E. private IP addresses
  A. NetFlow
  C. syslog

• Question 29:

  Which three post-mortem steps are critical to help prevent a network attack from reoccurring? (Choose three.)

  A. Document the incident in a report.
  B. Collect "show" outputs after the attack.
  C. Involve law enforcement officials.
  D. Create a "lessons learned" collection.
  E. Update the security rules for edge devices.
  F. Revise the network security policy.
  A. Document the incident in a report.
  D. Create a "lessons learned" collection.
  F. Revise the network security policy.

• Question 30:

  As a part of incident response, which action should be performed?

  A. watch to see if the incident reoccurs
  B. custody of information
  C. maintain data security and custody for future forensics use
  D. classify the problem
  C. maintain data security and custody for future forensics use