Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 431:

  Diffie-Hellman key exchange question

  A. IKE
  B. IPSEC
  C. SPAN
  D. STP
  A. IKE

• Question 432:

  What are two advanced features of the Cisco AMP solution for endpoints? (Choose two)

  A. reflection
  B. foresight
  C. sandboxing
  D. contemplation
  E. reputation
  C. sandboxing
  E. reputation

• Question 433:

  Which sensor mode can deny attackers inline?

  A. IPS
  B. fail-close
  C. IDS
  D. fail-open
  A. IPS

• Question 434:

  Which technology could be used on top of an MPLS VPN to add confidentiality?

  A. IPsec
  B. AES
  C. SSL
  D. 3DES
  A. IPsec

• Question 435:

  Which two statement about stateless firewalls is true? (Choose two)

  A. the Cisco ASA is implicitly stateless because it blocks all traffic by default.
  B. They compare the 5-tuple of each incoming packets against configurable rules.
  C. They cannot track connections..
  D. They are designed to work most efficiently with stateless protocols such as HTTP or HTTPS..
  E. Cisco IOS cannot implement them because the platform is Stateful by nature
  B. They compare the 5-tuple of each incoming packets against configurable rules.
  C. They cannot track connections..

• Question 436:

  Which two NAT types allow only objects or groups to reference an IP address? (Choose two)

  A. dynamic NAT
  B. dynamic PAT
  C. static NAT
  D. identity NAT
  A. dynamic NAT
  C. static NAT

• Question 437:

  Which two are valid types of VLANs using PVLANs? (Choose two.)

  A. Backup VLAN
  B. Secondary VLAN
  C. Promiscuous VLAN
  D. Community VLAN
  E. Isolated VLAN
  D. Community VLAN
  E. Isolated VLAN

• Question 438:

  With which type of Layer 2 attack can you intercept traffic that is destined for one host?

  A. MAC spoofing
  B. CAM overflow
  A. MAC spoofing

• Question 439:

  Within an 802.1X enabled network with the Auth Fail feature configured, when does a switch port get placed into a restricted VLAN?

  A. When user failed to authenticate after certain number of attempts
  B. When 802.1X is not globally enabled on the Cisco catalyst switch
  C. When AAA new-model is enabled
  D. If a connected client does not support 802.1X
  E. After a connected client exceeds a specific idle time
  A. When user failed to authenticate after certain number of attempts

• Question 440:

  What is one requirement for locking a wired or wireless device from ISE?

  A. The ISE agent must be installed on the device
  B. The device must be connnected to the network when the lock command is executed C. The user must approve the locking action
  D. The organization must implement an acceptable use policy allowing device locking
  A. The ISE agent must be installed on the device