Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 121:

  Which syslog severity level is level number 7?

  A. Warning
  B. Informational
  C. Notification
  D. Debugging
  D. Debugging

• Question 122:

  What type of Diffie-Hellman group would you expect to be utiliazed on a wireless device ?

  A. Group4
  B. Group7
  C. Group5
  D. Group3
  B. Group7

• Question 123:

  Which command is used to verify that a VPN connection is established between two endpoints and that the connection is passing?

  A. Firewall#sh crypto ipsec sa
  B. Firewall#sh crypto isakmp sa
  C. Firewall#debug crypto isakmp
  D. Firewall#sh crypto session
  A. Firewall#sh crypto ipsec sa

• Question 124:

  Which two options are advantages of an application layer firewall? (Choose two.)

  A. provides high-performance filtering
  B. makes DoS attacks difficult
  C. supports a large number of applications
  D. authenticates devices
  E. authenticates individuals
  B. makes DoS attacks difficult
  E. authenticates individuals

• Question 125:

  If you change the native VLAN on the port to an unused VLAN, what happens if an attacker attempts a double tagging attack?

  A. The trunk port would go into an error-disable state.
  B. A VLAN hopping attack would be successful
  C. A VLAN hopping attack would be prevented
  D. the attacked VLAN will be pruned
  C. A VLAN hopping attack would be prevented

• Question 126:

  In what type of attack does an attacker virtually change a devices burned in address in an attempt to circumvent access lists and mask the device's true identity?

  A. gratuitous ARP
  B. ARP poisoning
  C. IP Spoofing
  D. MAC Spoofing
  D. MAC Spoofing

• Question 127:

  Which firepower preprocessor block traffic based on IP?

  A. Signature-Based
  B. Policy-Based
  C. Anomaly-Based
  D. Reputation-Based
  D. Reputation-Based

• Question 128:

  Which countermeasures can mitigate ARP spoofing attacks? (Choose two.)

  A. Port security
  B. DHCP snooping
  C. IP source guard
  D. Dynamic ARP inspection
  B. DHCP snooping
  D. Dynamic ARP inspection

• Question 129:

  Which of the following are IKE modes? (Choose all and apply)

  A. Main Mode
  B. Fast Mode
  C. Aggressive Mode
  D. Quick Mode
  E. Diffie-Hellman Mode
  A. Main Mode
  C. Aggressive Mode
  D. Quick Mode

• Question 130:

  Which component of CIA triad relate to safe data which is in transit.

  A. Confidentiality
  B. Integrity
  C. Availability
  D. Scalability
  B. Integrity