Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 31:

  Which two characteristics of the TACACS+ protocol are true? (Choose two.)

  A. uses UDP ports 1645 or 1812
  B. separates AAA functions
  C. encrypts the body of every packet
  D. offers extensive accounting capabilities
  E. is an open RFC standard protocol
  B. separates AAA functions
  C. encrypts the body of every packet

• Question 32:

  What are two limitations of the self-zone policies on a zone-based firewall? (Choose two)

  A. They restnct SNMP traffic
  B. They are unable to implement application inspection
  C. They are unable to block HTTPS traffic
  D. They are unable to support HTTPS traffic
  E. They are unable to perform rate limiting.
  B. They are unable to implement application inspection
  E. They are unable to perform rate limiting.

• Question 33:

  Which ports need to be active for AAA server and a Microsoft server to permit Active Directory authentication?

  A. 445 and 389
  B. 888 and 3389
  C. 636 and 4445
  D. 363 and 983
  A. 445 and 389

• Question 34:

  Why ipsec tunnel is not working?

  A. because the ASA can't receive packets from remote endpoint
  A. because the ASA can't receive packets from remote endpoint

• Question 35:

  In a security context, which action can you take to address compliance?

  A. Implement rules to prevent a vulnerability
  B. Correct or counteract a vulnerability
  C. Reduce the severity of a vulnerability
  D. Follow directions from the security appliance manufacturer to remediate a vulnerability
  A. Implement rules to prevent a vulnerability

• Question 36:

  DRAG DROP

  Drag and drop each feature that can protect against DHCP attacks from the left onto the correct description on the right.

  Select and Place:

  

  

• Question 37:

  Which two NAT types allow only objects or groups to reference an IP address? (Choose two)

  A. dynamic NAT
  B. dynamic PAT
  C. static NAT
  D. identity NAT
  A. dynamic NAT
  C. static NAT

• Question 38:

  Which two ESA services are available for incoming and outgoing mails? (Choose two.)

  A. DLP
  B. reputation filter
  C. content filter
  D. anti-Dos
  E. antispam
  C. content filter
  E. antispam

• Question 39:

  Which technology can you implement to centrally mitigate potential threats when users on your network download files that might be malicious?

  A. Implement URL filtering on the perimeter firewall
  B. Verify that are company IPS blocks all known malicious websites
  C. Enable file reputation services to inspect all files that traverse the company network and block files with low reputation scores
  D. Verify that antivirus software is installed and up to date for all users on your network
  C. Enable file reputation services to inspect all files that traverse the company network and block files with low reputation scores

• Question 40:

  Which feature can help a router or switch maintain packet forwarding and protocol states despite an attack or heavy traffic load on the router or switch?

  A. Control Plane Policing
  B. Policy Map
  C. Service Policy
  D. Cisco Express Forwarding
  A. Control Plane Policing