Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 21:

  Which Cisco product can help mitigate web-based attacks within a network?

  A. Adaptive Security Appliance
  B. Web Security Appliance
  C. Email Security Appliance
  D. Identity Services Engine
  B. Web Security Appliance

• Question 22:

  Self zone (2 option)?

  A. can be source or deatination zone.
  B. can be use statful filtering during multicast.
  C. all interfaces wil be used for self zone
  A. can be source or deatination zone.
  C. all interfaces wil be used for self zone

• Question 23:

  Which two models of ASA tend to be used in a data center? (Choose two.)

  A. 5585X
  B. 5520
  C. ASA service module
  D. 5555X
  E. 5512X
  F. 5540
  A. 5585X
  C. ASA service module

• Question 24:

  Which security zone is automatically defined by the system?

  A. The source zone
  B. The self zone
  C. The destination zone
  D. The inside zone
  B. The self zone

• Question 25:

  What is the only permitted operation for processing multicast traffic on zone-based firewalls?

  A. Stateful inspection of multicast traffic is supported only for the self-zone.
  B. Stateful inspection of multicast traffic is supported only between the self-zone and the internal zone.
  C. Only control plane policing can protect the control plane against multicast traffic.
  D. Stateful inspection of multicast traffic is supported only for the internal zone
  C. Only control plane policing can protect the control plane against multicast traffic.

• Question 26:

  If a packet matches more than one class map in an individual feature type's policy map, how does the ASA handle the packet?

  A. the ASA will apply the actions from only the last matching class maps it finds for the feature type.
  B. the ASA will apply the actions from all matching class maps it finds for the feature type.
  C. the ASA will apply the actions from only the most specific matching class map it finds for the feature type.
  D. the ASA will apply the actions from only the first matching class maps it finds for the feature type
  D. the ASA will apply the actions from only the first matching class maps it finds for the feature type

• Question 27:

  Which statements about smart tunnels on a Cisco firewall are true? (Choose two.)

  A. Smart tunnels can be used by clients that do not have administrator privileges
  B. Smart tunnels support all operating systems
  C. Smart tunnels offer better performance than port forwarding
  D. Smart tunnels require the client to have the application installed locally
  A. Smart tunnels can be used by clients that do not have administrator privileges
  C. Smart tunnels offer better performance than port forwarding

• Question 28:

  Which command do you enter to verify the Phase 1 status of a VPN connection?

  A. debug crypto isakm
  B. sh crypto session
  C. sh crypto isakmp sa
  D. sh crypto ipsec sa
  C. sh crypto isakmp sa

• Question 29:

  What aims to remove the ability to deny an action?

  A. Deniability
  B. Accountability
  C. Non-Repudiation
  D. Integrity
  C. Non-Repudiation

• Question 30:

  Which two actions can a zone-based firewall apply to a packet as it transits a zone pair? (Choose two.)

  A. drop
  B. inspect
  C. queue
  D. quarantine
  E. block
  A. drop
  B. inspect