Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 141:

  Which command is needed to enable SSH support on a Cisco Router?

  A. crypto key lock rsa
  B. crypto key generate rsa
  C. crypto key zeroize rsa
  D. crypto key unlock rsa
  B. crypto key generate rsa

• Question 142:

  Refer to the exhibit. For which reason is the tunnel unable to pass traffic?

  

  A. UDP port 500 is blocked.
  B. The IP address of the remote peer is incorrect.
  C. The tunnel is failing to receive traffic from the remote peer.
  D. The local peer is unable to encrypt the traffic.
  C. The tunnel is failing to receive traffic from the remote peer.

• Question 143:

  What is the purpose of the Integrity component of the CIA triad?

  A. to ensure that only authorized parties can modify data
  B. to determine whether data is relevant
  C. to create a process for accessing data
  D. to ensure that only authorized parties can view data
  A. to ensure that only authorized parties can modify data

• Question 144:

  Refer to the exhibit. Which area represents the data center?

  

  A. A
  B. B
  C. C
  D. D
  A. A

• Question 145:

  Where does ip dhcp snooping trust command use?

  A. Where the dhcp server is connected
  B. At the aggregation point
  C. At access layer
  A. Where the dhcp server is connected

• Question 146:

  On Cisco ISR routers, for what purpose is the realm-cisco.pub public encryption key used?

  A. used for SSH server/client authentication and encryption
  B. used to verify the digital signature of the IPS signature file
  C. used to generate a persistent self-signed identity certificate for the ISR so administrators can authenticate the ISR when accessing it using Cisco Configuration Professional
  D. used to enable asymmetric encryption on IPsec and SSL VPNs
  E. used during the DH exchanges on IPsec VPNs
  B. used to verify the digital signature of the IPS signature file

• Question 147:

  How does a zone paid handle traffic if the policy definition of the zone pair is missing?

  A. It permits all traffic without logging.
  B. it drops all traffic
  C. it permits and logs all traffic
  D. it inspects all traffic
  B. it drops all traffic

• Question 148:

  How is management traffic isolated on a Cisco ASR 1002?

  A. Traffic is isolated based upon how you configure routing on the device
  B. There is no management traffic isolation on a Cisco ASR 1002
  C. The management interface is configured in a special VRF that provides traffic isolation from the default routing table
  D. Traffic isolation is done on the VLAN level
  D. Traffic isolation is done on the VLAN level

• Question 149:

  What can the SMTP preprocessor in a FirePOWER normalize?

  A. It can extract and decode email attachments in client to server traffic
  B. It can look up the email sender
  C. it compares known threats to the email sender
  D. It can forward the SMTP traffic to an email filter server
  E. It uses the Traffic Anomaly Detector
  A. It can extract and decode email attachments in client to server traffic

• Question 150:

  Which components does HMAC use to determine the authenticity and integrity of a message? (Choose two.)

  A. The password
  B. The hash
  C. The key
  D. The transform set
  B. The hash
  C. The key