Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 511:

  Which statement about NAT table evaluation in the ASA in true?

  A. Auto-NAT executed first
  B. After Auto-NAT executed first
  C. Auto-NAT executed after the Manual NAT
  A. Auto-NAT executed first

• Question 512:

  Which two actions does an IPS perform? (Choose two.)

  A. it spans the traffic
  B. it reconfigures a device to block the traffic
  C. it reflects the traffic back to the sender
  D. it encrypts the traffic
  E. it terminates the user session or connection of the attacker
  A. it spans the traffic
  E. it terminates the user session or connection of the attacker

• Question 513:

  Which two 802.1x features can you enable by running the IOS authentication priority command? (Choose two.)

  A. forced authorized port state
  B. Telnet authentication
  C. automatic selection
  D. Web authentication
  E. MAC authentication bypass
  D. Web authentication
  E. MAC authentication bypass

• Question 514:

  What security feature allows a private IP address to access the Internet by translating it to a public address?

  A. NAT
  B. hairpinning
  C. Trusted Network Detection
  D. Certification Authority
  A. NAT

• Question 515:

  Which three ESP fields can be encrypted during transmission? (Choose three)

  A. Next Header
  B. MAC Address
  C. Padding
  D. Pad Length
  E. Sequence Number
  F. Security Parameter Index
  A. Next Header
  C. Padding
  D. Pad Length

• Question 516:

  When an administrator initiates a device wipe command from the ISE, what is the immediate effect?

  A. It requests the administrator to choose between erasing all device data or only managed corporate data.
  B. It requests the administrator to enter the device PIN or password before proceeding with the operation
  C. It immediately erases all data on the device.
  D. It notifies the device user and proceeds with the erase operation
  A. It requests the administrator to choose between erasing all device data or only managed corporate data.

• Question 517:

  What does the key length represent

  A. Hash block size
  B. Cipher block size
  C. Number of permutations
  C. Number of permutations

• Question 518:

  Which security principle has been violated if data is altered in an unauthorized manner?

  A. accountability
  B. availability
  C. confidentiality
  D. integrity
  D. integrity

• Question 519:

  Which of the following commands result in a secure bootset? (Choose all that apply.)

  A. secure boot-set
  B. secure boot-config
  C. secure boot-files
  D. secure boot-image
  B. secure boot-config
  D. secure boot-image

• Question 520:

  Which type of address translation should be used when a Cisco ASA is in transparent mode?

  A. Static NAT
  B. Dynamic NAT
  C. Overload
  D. Dynamic PAT
  A. Static NAT