Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 11:

  Which IPS deployment is not most secure but best for network throughput?

  A. Promiscuous
  A. Promiscuous

• Question 12:

  What two actions would the zone base firewall when looking at the traffic?

  A. drop
  B. inspect
  C. forward
  A. drop
  B. inspect

• Question 13:

  In which two situations should you use in-band management? (Choose two)

  A. when a network device fails to forward packets
  B. when management applications need concurrent access to the device
  C. when you require ROMMON access
  D. when you require administrator's access from multiple locations
  E. when the control plane fails to respond
  B. when management applications need concurrent access to the device
  D. when you require administrator's access from multiple locations

• Question 14:

  What type of security support is provided by the Open Web Application Security Project?

  A. Education about common Web site vulnerabilities.
  B. A Web site security framework.
  C. A security discussion forum for Web site developers.
  D. Scoring of common vulnerabilities and exposures.
  A. Education about common Web site vulnerabilities.

• Question 15:

  An attacker installs a rogue switch that sends superior BPDUs on your network. What is a possible result of this activity?

  A. The switch could offer fake DHCP addresses.
  B. The switch could become the root bridge.
  C. The switch could be allowed to join the VTP domain
  D. The switch could become a transparent bridge.
  B. The switch could become the root bridge.

• Question 16:

  Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto isakmp sa command. What does the given output show?

  

  A. IKE Phase 1 main mode was created on 10.1.1.5, but it failed to negotiate with 10.10.10.2.
  B. IKE Phase 1 main mode has successfully negotiated between 10.1.1.5 and 10.10.10.2.
  C. IKE Phase 1 aggressive mode was created on 10.1.1.5, but it failed to negotiate with 10.10.10.2.
  D. IKE Phase 1 aggressive mode has successfully negotiated between 10.1.1.5 and 10.10.10.2.
  A. IKE Phase 1 main mode was created on 10.1.1.5, but it failed to negotiate with 10.10.10.2.

• Question 17:

  What port option in a PVLAN that can communicate with every other ports...

  A. Promiscuous ports
  B. Community ports
  C. Ethernet ports
  D. Isolate ports
  A. Promiscuous ports

• Question 18:

  If a packet matches more than one class map in an individual feature type's policy map, how does the ASA handle the packet?

  A. The ASA will apply the actions from only the most specific matching class map it finds for the feature type
  B. The ASA will apply the actions from all matching class maps it finds for the feature type
  C. The ASA will apply the actions from only the last matching class map it finds for the feature type.
  D. The ASA will apply the actions from only the first matching class map it finds for the feature type.
  D. The ASA will apply the actions from only the first matching class map it finds for the feature type.

• Question 19:

  The first layer of defense which provides real-time preventive solutions against malicious traffic is provided by?

  A. Banyan Filters
  B. Explicit Filters
  C. Outbreak Filters
  C. Outbreak Filters

• Question 20:

  Refer to the exhibit. Which line in this configuration prevents the HelpDesk user from modifying the interface configuration?

  

  A. Privilege exec level 9 show configure terminal
  B. Privilege exec level 7show start-up
  C. Privilege exec level 10 interface
  D. Username HelpDesk privilege 6 password help
  A. Privilege exec level 9 show configure terminal