Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 231:

  Which wildcard mask is associated with a subnet mask of /27?

  A. 0.0.0.31
  B. 0.0.0.27
  C. 0.0.0.224
  D. 0.0.0.255
  A. 0.0.0.31

• Question 232:

  Which type of PVLAN port allows communication from all port types?

  A. isolated
  B. community
  C. in-line
  D. promiscuous
  D. promiscuous

• Question 233:

  Refer to the exhibit. What is the effect of the given configuration?

  

  A. It establishes the preshared key for the router
  B. It establishes the preshared key for the firewall
  C. It establishes the preshared key for the Cisco ISE appliance
  D. It establishes the preshared key for the switch
  B. It establishes the preshared key for the firewall

• Question 234:

  Which statement about IOS privilege levels is true?

  A. Each privilege level is independent of all other privilege levels.
  B. Each privilege level supports the commands at its own level and all levels above it.
  C. Each privilege level supports the commands at its own level and all levels below it.
  D. Privilege-level commands are set explicitly for each user.
  C. Each privilege level supports the commands at its own level and all levels below it.

• Question 235:

  When AAA login authentication is configured on Cisco routers, which two authentication methods should be used as the final method to ensure that the administrator can still log in to the router in case the external AAA server fails? (Choose two.)

  A. group RADIUS
  B. group TACACS+
  C. local
  D. krb5
  E. enable
  F. if-authenticated
  C. local
  E. enable

• Question 236:

  Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto isakmp as command. What does the given output show?

  

  A. IPSec Phase 1 is established between 10.10.10.2 and 10.1.1.5
  B. IPSec Phase 2 is established between 10.10.10.2 and 10.1.1.5
  C. IPSec Phase 1 is down due to a QM_IDLE state
  D. IPSEc Phase 2 is down due to a QM_IDLE state
  A. IPSec Phase 1 is established between 10.10.10.2 and 10.1.1.5

• Question 237:

  Which two descriptions of TACACS+ are true? (Choose two.)

  A. It uses TCP as its transport protocol.
  B. It combines authentication and authorization.
  C. Only the password is encrypted.
  D. The TACACS+ header is unencrypted
  E. It uses UDP as its transport protocol.
  A. It uses TCP as its transport protocol.
  B. It combines authentication and authorization.

• Question 238:

  What is the best way to confirm that AAA authentication is working properly?

  A. use the test aaa command
  B. use the Cisco-recommended configuration for AAA authentication
  C. Log into and out of the router, and then check the NAS authentication log
  D. Ping the NAS to confirm connectivity
  A. use the test aaa command

• Question 239:

  What is example of social engineering

  A. Gaining access to a building through an unlocked door.
  B. something about inserting a random flash drive.
  C. gaining access to server room by posing as IT
  D. watching you enter your user and password on a network computer (something to that effect)
  C. gaining access to server room by posing as IT

• Question 240:

  Which statement about communication over failover interfaces is true?

  A. All information that is sent over the failover interface is sent as clear text, but the stateful failover link is encrypted by default.
  B. All information that is sent over the failover and stateful failover interfaces is encrypted by default
  C. All information that is sent over the failover and stateful failover interfaces is sent as clear text by default
  D. Usernames, password and preshared keys are encrypted by default when they are sent over the failover and stateful failover interfaces, but other information is sent as clear text
  C. All information that is sent over the failover and stateful failover interfaces is sent as clear text by default