Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 451:

  Which EAp method authentic a client against Active Directory without the use client-side 80.1x certificates?

  A. EAP-MSCHAPV2
  B. EAP-GTC
  C. EAP-TLS
  D. EAP-PEAP
  A. EAP-MSCHAPV2

• Question 452:

  A user reports difficulties accessing certain external web pages, When examining traffic to and from the external domain in full packet captures, you notice many SYNs that have the same sequence number, source, and destination IP address, but have different payloads. Which problem is a possible explanation of this situation?

  A. insufficient network resources
  B. failure of full packet capture solution
  C. misconfiguration of web filter
  D. TCP injection
  D. TCP injection

• Question 453:

  Which type of attack is directed against the network directly?

  A. Denial of Service
  B. phishing
  C. trojan horse
  A. Denial of Service

• Question 454:

  What are two default Cisco IOS privilege levels? (Choose two)

  B. 5
  C. 1
  D. 7
  E. 10
  F. 15
  C. 1
  F. 15

• Question 455:

  What IPSec mode is used to encrypt traffic between a server and VPN endpoint?

  A. tunnel
  B. Trunk
  C. Aggregated
  D. Quick
  E. Transport
  E. Transport

• Question 456:

  How can you protect CDP from reconnaissance attacks?

  A. Enable dot1x on all ports that are connected to other switches.
  B. Disable CP on ports connected to endpoints.
  C. Enable dynamic ARP inspection on all untrusted ports.
  D. Disable CDP on trunk ports.
  B. Disable CP on ports connected to endpoints.

• Question 457:

  Which path do you follow to enable AAA though the SDM?

  A. Configure > Additional Tasks > AAA
  B. Configure > AAA
  C. Configure > Authentication > AAA
  D. Configure > Additional Authentication > AAA
  E. Configure > Tasks > AAA
  A. Configure > Additional Tasks > AAA

• Question 458:

  Which mitigation technology for web-based threats prevents the removal of confidential data from the network?

  A. CTA
  B. AMP
  C. DLP
  D. DCA
  C. DLP

• Question 459:

  Man-in-the-middle attack definition:

  A. Check the answer below.
  A. Check the answer below.

  ---

  Man-in-the-middle attacks: Someone or something is between the two devices who believe they are communicating directly with each other. The "man in the middle" may be eavesdropping or actively changing the data that is being sent between the two parties. You can prevent this by implementing Layer 2 dynamic ARP inspection (DAI) and Spanning Tree Protocol (STP) guards to protect spanning tree. You can implement it at Layer 3 by using routing protocol authentication. Authentication of peers in a VPN is also a method of preventing this type of attack.

• Question 460:

  Which two authentication types does OSPF support? (Choose two)

  A. plaintext
  B. MD5
  C. HMAC
  D. AES 256
  E. SHA-1
  F. DES
  A. plaintext
  B. MD5