210-250 | Free 210-250 Exam Questions 2021

NEW QUESTION 1
In which context is it inappropriate to use a hash algorithm?

• A. Telnet logins
• B. Verifying file integrity
• C. SSH logins
• D. Digital signature verification

Answer: A

NEW QUESTION 2
What is one of the advantages of the mandatory access control (MAC) model?

• A. Easy and scalable.
• B. Stricter control over the information access.
• C. The owner can decide whom to grant access to.

Answer: B

NEW QUESTION 3
Which definition of a process in Windows is true?

• A. running program
• B. unit of execution that must be manually scheduled by the application
• C. database that stores low-level settings for the OS and for certain applications
• D. basic unit to which the operating system allocates processor time

Answer: A

NEW QUESTION 4
Which definition of permissions in Linux is true?

• A. rules that allow network traffic to go in and out
• B. table maintenance program
• C. written affidavit that you have to sign before using the system
• D. attributes of ownership and control of an object

Answer: D

NEW QUESTION 5
Which encryption algorithm is the strongest?

• A. AES
• B. CES
• C. DES
• D. 3DES

Answer: A

NEW QUESTION 6
Which term describes the act of a user, without authority or permission, obtaining rights on a system, beyond what were assigned?

• A. authentication tunneling
• B. administrative abuse
• C. rights exploitation
• D. privilege escalation

Answer: D

NEW QUESTION 7
While viewing packet capture data, you notice that one IP is sending and receiving traffic for multiple devices by modifying the IP header,
Which option is making this behavior possible?

• A. TOR
• B. NAT
• C. encapsulation
• D. tunneling

Answer: B

NEW QUESTION 8
Which hashing algorithm is the least secure?

• A. MD5
• B. RC4
• C. SHA-3
• D. SHA-2

Answer: A

NEW QUESTION 9
Which protocol is expected to have NTP a user agent, host, and referrer headers in a packet capture?

• A. NTP
• B. HTTP
• C. DNS
• D. SSH

Answer: B

NEW QUESTION 10
Which of the following is true about heuristic-based algorithms?

• A. Heuristic-based algorithms may require fine tuning to adapt to network traffic and minimize the possibility of false positives.
• B. Heuristic-based algorithms do not require fine tuning.
• C. Heuristic-based algorithms support advanced malware protection.
• D. Heuristic-based algorithms provide capabilities for the automation of IPS signature creation and tuning.

Answer: A

NEW QUESTION 11
DNS query uses which protocol

• A. TCP
• B. UDP
• C. HTTP
• D. ICMP

Answer: B

NEW QUESTION 12
What Linux commands show the process for all users?

• A. ps –a
• B. ps –u
• C. ps –d
• D. ps –m

Answer: A

NEW QUESTION 13
Which vulnerability is an example of Heartbleed?

• A. Buffer overflow
• B. Denial of service
• C. Command injection
• D. Information disclosure

Answer: D

NEW QUESTION 14
Which NTP service is ABest practice to ensure that all network devices are synchronized with a reliable and trusted time source?

• A. Redundant authenticated NTP
• B. Redundant unauthenticated NTP
• C. Authenticated NTP services from one of the local AD domain controllers
• D. Local NTP within each network device

Answer: A

NEW QUESTION 15
Which two activities are examples of social engineering? (Choose two)

• A. receiving call from the IT department asking you to verify your username/password to maintain the account
• B. receiving an invite to your department's weekly WebEx meeting
• C. sending a verbal request to an administrator to change the password to the account of a user the administrator does know
• D. receiving an email from MR requesting that you visit the secure HR website and update your contract information
• E. receiving an unexpected email from an unknown person with an uncharacteristic attachment from someone in the same company

Answer: AD

NEW QUESTION 16
Which evasion method servers as an important functionality of ransomware?

• A. Encoding
• B. Encryption
• C. Resource exhaustion
• D. Extended sleep calls

Answer: B

NEW QUESTION 17
What event types does FMC record?

• A. standard common event logs types
• B. successful login event logs
• C. N/A

Answer: C

NEW QUESTION 18
Which type of exploit normally requires the culprit to have prior access to the target system?

• A. local exploit
• B. denial of service
• C. system vulnerability
• D. remote exploit

Answer: A

NEW QUESTION 19
Which term represents the likely hood of potential danger that could take advantage of a weakness in a system?

• A. vulnerability
• B. risk
• C. threat
• D. exploit

Answer: B