Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 421:

  Which two features are commonly used CoPP and CPPr to protect the control plane? (Choose two.)

  A. QoS
  B. traffic classification
  C. access lists
  D. policy maps
  E. class maps
  F. Cisco Express Forwarding
  A. QoS
  B. traffic classification

• Question 422:

  Scenario

  In this simulation, you have access to ASDM only. Review the various ASA configurations using ASDM then answer the four multiple choice questions about the ASA SSLVPN configurations.

  To access ASDM, click the ASA icon in the topology diagram.

  Note: Not all ASDM functionalities are enabled in this simulation.

  To see all the menu options available on the left navigation pane, you may also need to un-expand the expanded menu first.

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  

  When users login to the Clientless SSLVPN using https://209.165.201.2/test, which group policy will be applied?

  A. test
  B. clientless
  C. Sales
  D. DfltGrpPolicy
  E. DefaultRAGroup
  F. DefaultWEBVPNGroup
  C. Sales

  ---

  First navigate to the Connection Profiles tab as shown below, highlight the one with the test alias:

  

  Then hit the "edit" button and you can clearly see the Sales Group Policy being applied.

  

• Question 423:

  Which firewall configuration must you perform to allow traffic to flow in both directions between two zones?

  A. You can configure a single zone pair that allows bidirectional traffic flows from for any zone except the self-zone
  B. You must configure two zone pairs, one for each direction
  C. You can configure a single zone pair that allows bidirectional traffic flows for any zone
  D. You can configure a single zone pair that allows bidirectional traffic flows only if the source zone is the less secure zone.
  B. You must configure two zone pairs, one for each direction

• Question 424:

  Which protocol offers data integrity, encryption, authentication, and antireplay functions for IPsec VPN?

  A. AH protocol
  B. ESP protocol
  C. IKEv2 protocol
  D. IKEv1 protocol
  B. ESP protocol

• Question 425:

  Which three ways does the RADIUS protocol differ from TACACS?? (Choose three)

  A. RADIUS authenticates and authorizes simultaneously. Causing fewer packets to be transmitted
  B. RADIUS encrypts only the password field in an authentication packets
  C. RADIUS can encrypt the entire packet that is sent to the NAS
  D. RADIUS uses UDP to communicate with the NAS
  E. RADIUS uses TCP to communicate with the NAS
  F. RADIUS support per-command authentication
  A. RADIUS authenticates and authorizes simultaneously. Causing fewer packets to be transmitted
  B. RADIUS encrypts only the password field in an authentication packets
  D. RADIUS uses UDP to communicate with the NAS

• Question 426:

  Regarding PVLAN diagram question:

  Switch was in VLAN 300

  Isolated Host 1 on VLAN 301

  Host 2 and Host 4 on VLAN 303 or something (Community PVLAN)

  Server is connected to Switch.

  All host connects to switch.

  A. Host 2 (Host is part of community PVLAN).
  B. Other devices on VLAN XXX (VLAN were isolated host is connected, in my case it was Host 1).
  C. Server
  D. Host 4 (Host is part of community PVLAN)
  C. Server

• Question 427:

  Which security term refers to the likelihood that a weakness will be exploited to cause damage to an asset?

  A. threat
  B. vulnerability
  C. risk
  D. countermeasure
  B. vulnerability

• Question 428:

  What is the best definition of hairpinning?

  A. ingress traffic that traverses the outbound interface on a device
  B. traffic that enters and exits a device through the same interface
  C. traffic that enters one interface on a device and that exits through another interface
  D. traffic that tunnels through a device interface
  B. traffic that enters and exits a device through the same interface

• Question 429:

  Which of the following statements about access lists are true? (Choose three.)

  A. Extended access lists should be placed as near as possible to the destination
  B. Extended access lists should be placed as near as possible to the source
  C. Standard access lists should be placed as near as possible to the destination
  D. Standard access lists should be placed as near as possible to the source
  E. Standard access lists filter on the source address
  F. Standard access lists filter on the destination address
  B. Extended access lists should be placed as near as possible to the source
  C. Standard access lists should be placed as near as possible to the destination
  E. Standard access lists filter on the source address

• Question 430:

  Which type of malicious software can create a back-door into a device or network?

  A. worm
  B. Trojan
  C. virus
  D. bot
  B. Trojan