Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 111:

  Which two services define cloud networks? (Choose two.)

  A. Infrastructure as a Service
  B. Platform as a Service
  C. Compute as a Service
  D. Security as a Service
  E. Tenancy as a Service
  A. Infrastructure as a Service
  B. Platform as a Service

• Question 112:

  In which stage of an attack does the attacker discover devices on a target network?

  A. Reconnaissance
  B. Covering tracks
  C. Gaining access
  D. Maintaining access
  A. Reconnaissance

• Question 113:

  Which quantifiable item should you consider when your organization adopts new technologies?

  A. threats
  B. vulnerability
  C. risk
  D. exploits
  C. risk

• Question 114:

  Refer to the exhibit. What is the effect of the given configuration?

  

  A. The two routers receive normal updates from one another
  B. It enables authentication
  C. It prevents keycham authentication
  D. The two devices are able to pass the message digest to one another.
  D. The two devices are able to pass the message digest to one another.

• Question 115:

  The NAT traversal definition:

  A. Check the answer below.
  A. Check the answer below.

  ---

  NAT-T (NAT Traversal)

  If both peers support NAT-T, and if they detect that they are connecting to each other through a Network Address Translation (NAT) device (translation is happening), they may negotiate that they want to put a fake UDP port 4500 header on each IPsec packet (before the ESP header) to survive a NAT device that otherwise may have a problem tracking an ESP session (Layer 4 protocol 50).

  https://supportforums.cisco.com/document/64281/how-does-nat-t-work-ipsec

• Question 116:

  Which type of PVLAN port allows hosts in the same VLAN to communicate directly with each other?

  A. community for hosts in the PVLAN
  B. promiscuous for hosts in the PVLAN
  C. isolated for hosts in the PVLAN
  D. span for hosts in the PVLAN
  A. community for hosts in the PVLAN

• Question 117:

  Which port should (or would) be open if VPN NAT-T was enabled?

  A. port 4500 outside interface
  B. port 4500 in all interfaces where ipsec uses
  C. port 500
  D. port 500 outside interface
  B. port 4500 in all interfaces where ipsec uses

• Question 118:

  How can you mitigate DCE/RPC evasion techniques while allowing access to the DCE/RPC service?

  A. Update the IPS signature for HTTPS to validate DCE/RPC connections
  B. Block suspicious hosts from DCE/RPC port 593 C. Tunnel DCE/RPC traffic through GRE
  D. Configure the DCE/RPC preprocessor
  B. Block suspicious hosts from DCE/RPC port 593 C. Tunnel DCE/RPC traffic through GRE

• Question 119:

  Which option is a weakness in an information system that an attacker might leverage to gain unauthorized access to the system or its data?

  A. hack
  B. mitigation
  C. risk
  D. vulnerability
  E. exploit
  D. vulnerability

• Question 120:

  Which feature filters CoPP packets?

  A. Policy maps
  B. route maps
  C. access control lists
  D. class maps
  C. access control lists