Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 161:

  Which Statement about personal firewalls is true?

  A. They are resilient against kernal attacks
  B. They can protect email messages and private documents in a similar way to a VPN
  C. They can protect the network against attacks
  D. They can protect a system by denying probing requests
  D. They can protect a system by denying probing requests

• Question 162:

  Which type of encryption technology has the broadcast platform support?

  A. Middleware
  B. Hardware
  C. Software
  D. File-level
  C. Software

• Question 163:

  A specific URL has been identified as containing malware. What action can you take to block users from accidentaly visiting the URL and becoming infected with malware?

  A. Enable URL filtering on the perimeter firewall and add the URLs you want to allow to the routers local URL list
  B. Enable URL filtering on the perimeter router and add the URLs you want to allow to the firewalls local URL list
  C. Create a blacklist that contains the URL you want to block and activate the blacklist on the perimeter router.
  D. Enable URL filtering on the perimeter router and add the URLs you want to block to the routers local URL list
  E. Create a whitelist that contains the URls you want to allow and activate the whitelist on the perimeter router.
  D. Enable URL filtering on the perimeter router and add the URLs you want to block to the routers local URL list

• Question 164:

  In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three)

  A. When matching ACL entries are configured
  B. when matching NAT entries are configured
  C. When the firewall requires strict HTTP inspection
  D. When the firewall requires HTTP inspection
  E. When the firewall receives a SYN-ACK packet
  F. When the firewall receives a SYN packet
  A. When matching ACL entries are configured
  B. when matching NAT entries are configured
  E. When the firewall receives a SYN-ACK packet

• Question 165:

  How does PEAP protect EAP exchange?

  A. it encrypts the exchange using the client certificate.
  B. it validates the server-supplied certificate and then encrypts the exchange using the client certificate
  C. it encrypts the exchange using the server certificate
  D. it validates the client-supplied certificate and then encrypts the exchange using the server certificate.
  C. it encrypts the exchange using the server certificate

• Question 166:

  The Oakley cryptography protocol is compatible with following for managing security?

  A. IPSec
  B. ISAKMP
  C. Port security
  B. ISAKMP

• Question 167:

  Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show?

  

  A. ISAKMP security associations are established between 10.1.1.5 and 10.1.1.1
  B. IPSec Phase 2 is established between 10.1.1.1 and 10.1.1.5
  C. IKE version 2 security associations are established between 10.1.1.1 and 10.1.1.5
  D. IPSec Phase 2 is down due to a mismatch between encrypted and decrypted packets
  B. IPSec Phase 2 is established between 10.1.1.1 and 10.1.1.5

• Question 168:

  Which statements about reflexive access lists are true?

  A. Reflexive access lists create a permanent ACE
  B. Reflexive access lists approximate session filtering using the established keyword
  C. Reflexive access lists can be attached to standard named IP ACLs
  D. Reflexive access lists support UDP sessions
  E. Reflexive access lists can be attached to extended named IP ACLs
  F. Reflexive access lists support TCP sessions
  D. Reflexive access lists support UDP sessions
  E. Reflexive access lists can be attached to extended named IP ACLs
  F. Reflexive access lists support TCP sessions

• Question 169:

  Which command enables authentication at the OSPFv2 routing process level?

  A. area 0 authentication message-digest
  B. area 0 authentication ipsec spi 500 md5 1 234567890ABCDEF1234567890ABCDEF
  C. ip ospf authentication message-digest
  D. ip ospf message-digest-key 1 md5 C1sc0!
  A. area 0 authentication message-digest

• Question 170:

  SSL certificates are issued by Certificate Authority(CA) are?

  A. Trusted root
  B. Not trusted
  A. Trusted root