Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 401:

  What is true about the Cisco IOS Resilient Configuration feature?

  A. The feature can be disabled through a remote session
  B. There is additional space required to secure the primary Cisco IOS Image file
  C. The feature automatically detects image and configuration version mismatch
  D. Remote storage is used for securing files
  C. The feature automatically detects image and configuration version mismatch

• Question 402:

  Which line in the following OSPF configuration will not be required for MD5 authentication to work?

  interface GigabitEthernet0/1 ip address 192.168.10.1 255.255.255.0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 CCNA ! router ospf 65000 router-id 192.168.10.1 area 20 authentication message-digest network 10.1.1.0 0.0.0.255 area 10 network 192.168.10.0 0.0.0.255 area 0 !

  A. ip ospf authentication message-digest
  B. network 192.168.10.0 0.0.0.255 area 0
  C. area 20 authentication message-digest
  D. ip ospf message-digest-key 1 md5 CCNA
  C. area 20 authentication message-digest

• Question 403:

  Refer to the exhibit while troubleshooting site-to-site VPN, you issued the show crypto isakamp sa command. What does the given output shows?

  

  A. IPSec Phase 2 established between 10.10.10.2 and 10.1.1.5
  B. IPSec Phase 1 established between 10.10.10.2 and 10.1.1.5
  C. IPSec Phase 2 is down due to a QM_IDLE state.
  D. IPSec Phase 1 is down due to a QM_IDLE state.
  B. IPSec Phase 1 established between 10.10.10.2 and 10.1.1.5

• Question 404:

  Which statement about interface and global access rules is true?

  A. Interface access rules are processed before global access rules
  B. The implicit allow is processed after both the global and interface access rules
  C. If an interface access rule is applied, the global access rule is ignored
  D. Global access rules apply only to outbound traffic, but interface access rules can be applied in either direction
  A. Interface access rules are processed before global access rules

• Question 405:

  Which option describes information that must be considered when you apply an access list to a physical interface?

  A. Protocol used for filtering
  B. Direction of the access class
  C. Direction of the access group
  D. Direction of the access list
  C. Direction of the access group

• Question 406:

  Which networks topology describes multiple LANs in a geographically limited area?

  A. CAN
  B. MAN
  C. SOHO
  D. PAN
  A. CAN

• Question 407:

  Which statement about Cisco ACS authentication and authorization is true?

  A. ACS servers can be clustered to provide scalability
  B. ACS can query multiple Active Directory domains
  C. ACS uses TACACS to proxy other authentication servers
  D. ACS can use only one authorization profile to allo or deny requests
  A. ACS servers can be clustered to provide scalability

• Question 408:

  Which SNMPv3 security level provides authentication using HMAC with MD5, but does not use encryption?

  A. authPriv
  B. authNoPriv
  C. NoauthPriv
  D. noAuthNoPriv
  B. authNoPriv

• Question 409:

  You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP address Reputation. A user calls and is not able to access a certain IP address. What action can you take to allow the user access to the IP address?

  A. Create a custom blacklist to allow traffic
  B. Create a whitelist and add the appropriate IP address to allow traffic.
  C. Create a user based access control rule to allo the traffic.
  D. Create a network based access control rule to allow the traffic.
  E. Create a rule to bypass inspection to allow the traffic
  B. Create a whitelist and add the appropriate IP address to allow traffic.

• Question 410:

  The stealing of confidential information of a company comes under the scope of

  A. Reconnaissance
  B. Spoofing attack
  C. Social Engineering
  D. Denial of Service
  C. Social Engineering