Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 501:

  A clientless SSL VPN user who is connecting on a Windows Vista computer is missing the menu option for Remote Desktop Protocol on the portal web page. Which action should you take to begin troubleshooting?

  A. Ensure that the RDP2 plug-in is installed on the VPN gateway
  B. Reboot the VPN gateway
  C. Instruct the user to reconnect to the VPN gateway
  D. Ensure that the RDP plug-in is installed on the VPN gateway
  A. Ensure that the RDP2 plug-in is installed on the VPN gateway

• Question 502:

  On which Cisco Configuration Professional screen do you enable AAA?

  A. AAA Summary
  B. AAA Servers and Groups
  C. Authentication Policies
  D. Authorization Policies
  A. AAA Summary

• Question 503:

  You have implemented a dynamic blacklist, using security intelligence to block illicit network activity. However, the blacklist contains several approved connections that users must access for business purposes. Which action can you take to retain the blacklist while allowing users to access the approved sites?

  A. Create a whitelist and manually add the approved addresses
  B. Edit the dynamic blacklist to remove the approved addresses
  C. Disable the dynamic blacklist and deny the specific address on a whitelist while permitting the others
  D. Disable the dynamic blacklist and create a static blacklist in its place
  A. Create a whitelist and manually add the approved addresses

• Question 504:

  Why does ISE require its own certificate issued by a trusted CA?

  A. ISE's certificate allows guest devices to validate it as a trusted network device.
  B. It generates certificates for guest devices based on its own certificate
  C. ISE's certificate allows it to join the network security framework
  D. It requests certificates for guest devices from the CA server based on its own certificate.
  A. ISE's certificate allows guest devices to validate it as a trusted network device.

• Question 505:

  Refer to the exhibit. Which type of NAT is configured on a Cisco ASA?

  

  A. dynamic NAT
  B. dynamic PAT
  C. identity twice NAT
  D. source identity NAT
  B. dynamic PAT

• Question 506:

  What data is transferred during DH for making public and private key?

  A. Random prime Integer
  B. Encrypted data transfer
  C. Diffie-Hellman
  A. Random prime Integer

• Question 507:

  Which next-generation encryption algorithm supports four variants?

  A. HMAC
  B. SHA-2
  C. SHA-1
  D. MD5
  B. SHA-2

• Question 508:

  What are two ways to prevent eavesdropping when you perform device-management tasks? (Choose two.)

  A. Use an SSH connection.
  B. Use SNMPv3.
  C. Use out-of-band management.
  D. Use SNMPv2.
  E. Use in-band management.
  A. Use an SSH connection.
  B. Use SNMPv3.

• Question 509:

  Refer to the above. Which translation technique does this configuration result in?

  # nat (inside,outside) dynamic interface

  A. Static NAT
  B. Dynamic NAT
  C. Dynamic PAT
  D. Twice NAT
  C. Dynamic PAT

• Question 510:

  In which configuration mode do you configure the ip ospf authentication-key 1 command?

  A. Interface
  B. routing process
  C. global
  D. privileged
  A. Interface