210-250 Exam Questions

Which process continues to be recorded in the process table after it has ended and the status is returned to the parent?

For which kind of attack does an attacker use known information in encrypted files to break the encryption scheme for the rest of

In which technology is network level encrypted not natively incorporated?

Which purpose of command and control for network aware malware is true?

Which action is an attacker taking when they attempt to gain root access on the victims system?

Which vulnerability is an example of Shellshock?

In which format are NetFlow records stored?

A zombie process occurs when which of the following happens?

Early versions of the Microsoft PPTP virtual private network software used the same RC4 key for the sender and the receiver. Which attack is the network vulnerable to when a stream...

How does NTP help with security monitoring?

Which hash algorithm is cryptography used in certificate generation?

Which description is an example of whaling?

Which tool provides universal query access to text based data such as event logs and file system?

You have deployed an enterprise-wide host/endpoint technology for all of the company corporate PCs. Management asks you to block a selected set of applications on all corporate PCs...

What does the sum of the risks presented by an application represent for that application?

The FMC can share HTML, PDF and CSV data types that relate to a specific event type. Which event type?

What are two Features of NGFW:

How does NTP help with monitoring?

Which protocols is primarily supported by the 3rd layer of the OSI ref models ?

What Does the sum of the risk presented by an application represent for that application ?

Which protocol is primarily supported by the Fourth layer of the Open Systems Interconnection reference model?

As per RFC 1035 which transport layer protocol is used for DNS zone transfer?

Which of the following are some useful reports you can collect from Cisco ISE related to endpoints? (Select all that apply.)

Which of the following are examples of system-based sandboxing implementations? (Select all that apply.)

Which of the following are public key standards?

which protocol helps to synchronizes and correlate events across multiple network devices:

which security principle is violated by running all processes as root/admin

DNS query uses which protocol

Which data type is the most beneficial to recreate a binary file for malware analysis

Which options is true when using the traffic mirror feature in a switch?

Which term represents the likely hood of potential danger that could take advantage of a weakness in a system?

You have deployed an enterprise-wide-host/endpoint technology for all of the company corporate PCs Management asks you to block a selected set application on all corporate PCs. Whi...

In which context is it inappropriate to use a hash algorithm?

Which purpose of the certificate revocation list is true?

Company XX must filter/control some application and limited connection based on location across the network, which technology can be used?

Which evasion method servers as an important functionality of ransomware?

Which NTP service is a best practice to ensure that all network devices are synchronized with a reliable and trusted time source?

Which two protocols are often used for DDoS amplification attacks (choose two)

Which option is true when using the traffic mirror feature in a switch?

Which purpose of a security risk assessment is true?

Which vulnerability is an example of Heartbleed?

Endpoint logs indicate that a machine has obtained an unusual gateway address and unusual DNS servers via DHCP. Which option is this situation most likely an example of?

Which three fields are within an X.509v3 end entity certificate? (Choose three).

What event types does FMC record?

A child process that's permitted to continue on its own after its parent process is terminated. What is that child process called?

Which type of technology is used for detecting unusual patterns and anomalous behavior on a network?

What type of algorithm uses the same key to encrypt and decrypt data?

Which Statement about personal firewalls is true?

What Linux commands show the process for all users?

What two types of attacks are examples of ICMP DoS attacks? (Choose two.)