Online Access Free 210-250 Exam Questions

which definition of common event format in terms of a security information and event management solution is true?

• A.TCP network media protocol.
• B.Event log analysis certificate that stands for certified event forensics.
• C.type of event log used to identify a successful user login.
• D.A standard log event format that is used for log collection.

Which of the following are metrics that can measure the effectiveness of a runbook?

• A.Mean time between failures (MTBF)
• B.All of the above
• C.Mean time to repair (MTTR)
• D.Mean time to discover a security incident

A system administrator installs an IDS to protect users on 10.2.3.0/24. After the installation, users can see only other machines on their /24 consistently and cannot reach external sites. Which possible explanation is true?

• A.The IDS was installed inline and is dropping traffic that must be- allowed
• B.The IDS is working properly and providing the users on 10 2 3 0/24 with the security they need
• C.The system administrator mirrored the traffic for that network segment and did not tune the IDS properly
• D.The IDS was configured to fail open and has not yet been fully configured

You have deployed an enterprise-wide-host/endpoint technology for all of the company corporate PCs Management asks you to block a selected set application on all corporate PCs. Which technology is the option?

• A.Network NGFW
• B.Antivirus/antispyware software.
• C.Host-based IDS
• D.Application whitelisting/blacklisting

What event types does FMC record?

• A.standard common event logs types
• B.N/A
• C.successful login event logs