Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 411:

  If the native VLAN on a trunk is different on each end of the link, what is a potential consequence?

  A. The interface on both switches may shut down
  B. STP loops may occur
  C. The switch with the higher native VLAN may shut down
  D. The interface with the lower native VLAN may shut down
  B. STP loops may occur

• Question 412:

  Which network device does NTP authenticate?

  A. Only the time source
  B. Only the client device
  C. The firewall and the client device
  D. The client device and the time source
  A. Only the time source

• Question 413:

  Which four tasks are required when you configure Cisco IOS IPS using the Cisco Configuration Professional IPS wizard? (Choose four.)

  A. Select the interface(s) to apply the IPS rule.
  B. Select the traffic flow direction that should be applied by the IPS rule.
  C. Add or remove IPS alerts actions based on the risk rating.
  D. Specify the signature file and the Cisco public key.
  E. Select the IPS bypass mode (fail-open or fail-close).
  F. Specify the configuration location and select the category of signatures to be applied to the selected interface(s).
  A. Select the interface(s) to apply the IPS rule.
  B. Select the traffic flow direction that should be applied by the IPS rule.
  D. Specify the signature file and the Cisco public key.
  F. Specify the configuration location and select the category of signatures to be applied to the selected interface(s).

• Question 414:

  Unicast Reverse Path Forwarding definition:

  A. Check the answer below.
  A. Check the answer below.

  ---

  Unicast Reverse Path Forwarding

  Unicast Reverse Path Forwarding (uRPF) can mitigate spoofed IP packets. When this feature is enabled on an interface, as packets enter that interface the router spends an extra moment considering the source address of the packet. It then considers its own routing table, and if the routing table does not agree that the interface that just received this packet is also the best egress interface to use for forwarding to the source address of the packet, it then denies the packet.

• Question 415:

  If you change the native VLAN on the trunk port to an unused VLAN, what happens if an attacker attempts a double-tagging attack?

  A. The trunk port would go into an error-disabled state.
  B. A VLAN hopping attack would be successful.
  C. A VLAN hopping attack would be prevented.
  D. The attacked VLAN will be pruned.
  C. A VLAN hopping attack would be prevented.

• Question 416:

  Which FirePOWER preprocessor engine is used to prevent SYN attacks?

  A. Anomaly.
  B. Rate-Based Prevention
  C. Portscan Detection
  D. Inline Normalization
  B. Rate-Based Prevention

• Question 417:

  What is the primary purposed of a defined rule in an IPS?

  A. to detect internal attacks
  B. to define a set of actions that occur when a specific user logs in to the system
  C. to configure an event action that is pre-defined by the system administrator
  D. to configure an event action that takes place when a signature is triggered.
  D. to configure an event action that takes place when a signature is triggered.

• Question 418:

  Refer to the exhibit. If a supplicant supplies incorrect credentials for all authentication methods configured on the switch, how will the switch respond?

  

  A. The switch will cycle through the configured authentication methods indefinitely
  B. The supplicant will fail to advance beyond the webauth method.
  C. The authentication attempt will time out and the switch will place the port into the unathorized state
  D. The authentication attempt will time out and the switch will place the port into VLAN 101
  B. The supplicant will fail to advance beyond the webauth method.

• Question 419:

  Which two types of VLANs using PVLANs are valid? (Choose two.)

  A. secondary
  B. community
  C. isolated
  D. promiscuous
  E. backup
  B. community
  C. isolated

• Question 420:

  Which statement about zone-based firewall configuration is true?

  A. Traffic is implicitly denied by default between interfaces the same zone
  B. Traffic that is desired to or sourced from the self-zone is denied by default
  C. The zone must be configured before a can be assigned
  D. You can assign an interface to more than one interface
  C. The zone must be configured before a can be assigned