210-260 Exam Details

  • Exam Code
    :210-260
  • Exam Name
    :Implementing Cisco Network Security
  • Certification
    :Cisco Certifications
  • Vendor
    :Cisco
  • Total Questions
    :527 Q&As
  • Last Updated
    :Dec 12, 2021

Cisco 210-260 Online Questions & Answers

  • Question 461:

    Which two actions can an end user take to manage a lost or stolen device in Cisco ISE? (Choose two)

    A. Reinstate a device that the user previously marked as lost or stolen.
    B. Activate Cisco ISE Endpoint protection Services to quarantine the device.
    C. Request revocation of the digital certificate of the device.
    D. Add the MAC address of the device to a list of blacklisted devices.
    E. Force the device to be locked with a PIN.

  • Question 462:

    Which IDS/IPS state misidentifies acceptable behavior as an attack?

    A. False positives
    B. False negative
    C. True positive
    D. True negative

  • Question 463:

    When Cisco IOS zone-based policy firewall is configured, which three actions can be applied to a traffic class? (Choose three.)

    A. pass
    B. police
    C. inspect
    D. drop
    E. queue
    F. shape

  • Question 464:

    Which two statements about the self zone on a Cisco zone-based policy firewall are true? (Choose Two)

    A. Multiple interfaces can be assigned to the self zone.
    B. Traffic entering the self zone must match a rule.
    C. Zone pairs that include the self zone apply to traffic transiting the device.
    D. It can be either the source zone or the destination zone.
    E. It supports stateful inspection for multicast traffic.

  • Question 465:

    Which cisco IOS device support firewall, antispyware, anti-phishing, protection, etc.

    A. Cisco IOS router
    B. Cisco 4100 IOS IPS appliance
    C. Cicso 5500 series ASA
    D. Cisco 5500x next generation ASA

  • Question 466:

    Refer to the exhibit. What type of firewall would use the given cofiguration line?

    A. a stateful firewall
    B. a personal firewall
    C. a proxy firewall
    D. an application firewall
    E. a stateless firewall

  • Question 467:

    Which two primary security concerns can you mitigate with a BYOD solution? (Choose two)

    A. Schedule for patching the device
    B. compliance with applicable policies C. device lagging and inventory
    D. Connections to public Wi-Fi networks
    E. Securing access to a trusted corporate network.

  • Question 468:

    What are two challenges of using a network-based IPS? (Choose two )

    A. It must support multiple operating systems
    B. It is unable to determine whether a detected attack was successful.
    C. As the network expands, it requires you to add more sensors
    D. It requires additional storage and processor capacity on syslog servers.
    E. It is unable to detect attacks across the entire network

  • Question 469:

    Referring to CIA (confidentiality,Integrity and Availability), where would a hash-only make more sense?

    A. Data at Rest
    B. Data on File

  • Question 470:

    Which ports need to be active for AAA server to integrate with Microsoft AD?

    A. 445 and 389
    B. 445 and 8080
    C. 443 and 389
    D. 443 and 8080

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 210-260 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.