Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 51:

  What information does the key length provide in an encryption algorithm?

  A. the packet size
  B. the number of permutations
  C. the hash block size
  D. the cipher block size
  B. the number of permutations

• Question 52:

  Which Cisco feature can help mitigate spoofing attacks by verifying symmetry of the traffic path?

  A. Unidirectional Link Detection
  B. Unicast Reverse Path Forwarding
  C. TrustSec
  D. IP Source Guard
  B. Unicast Reverse Path Forwarding

• Question 53:

  Which type of IPS can identify worms that are propagating in a network?

  A. Policy-based IPS
  B. Anomaly-based IPS
  C. Reputation-based IPS
  D. Signature-based IPS
  B. Anomaly-based IPS

• Question 54:

  Which three ESP fields can be encrypted during transmission? (Choose three)

  A. Security Parameter Index
  B. Sequence Number
  C. MAC Address
  D. Padding
  E. Pad Length
  F. Next Header
  D. Padding
  E. Pad Length
  F. Next Header

• Question 55:

  Which IDS/IPS solution can monitor system processes and resources?

  A. IDS
  B. HIPS
  C. PROXY
  D. IPS
  B. HIPS

• Question 56:

  Which description of the use of a private key is true?

  A. the sender signs a message using their private key
  B. the sender signs a message using the receiver's private key
  C. the sender encrypts a message using the receiver's private key
  D. the receiver decrypts a message using the sender's private key
  A. the sender signs a message using their private key

• Question 57:

  Refer to the exhibit. What is the effect of the given command sequence?

  

  A. It configures IKE Phase 1
  B. It configures a site-to-site VPN Tunnel
  C. It configures a crypto policy with a key size of 14400
  D. It configures IPSec Phase 2
  A. It configures IKE Phase 1

• Question 58:

  Refer to the exhibit. Which statement about this output is true?

  

  A. The user logged into the router with the incorrect username and password.
  B. The login failed because there was no default enable password.
  C. The login failed because the password entered was incorrect.
  D. The user logged in and was given privilege level 15.
  C. The login failed because the password entered was incorrect.

• Question 59:

  Which two configurations can prevent VLAN hopping attack from attackers at VLAN 10? (Choose two.)

  A. using switchport mode access command on all host ports
  B. enabling BPDU guard on all access ports
  C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports
  D. applying ACL between VLANs
  E. using switchport trunk native vlan 10 command on trunk ports
  F. using switchport nonegotiate command on dynamic desirable ports
  A. using switchport mode access command on all host ports
  C. creating VLAN 99 and using switchport trunk native vlan 99 command on trunk ports

• Question 60:

  Which option is the most effective placement of an IPS device within the infrastructure?

  A. Inline, behind the internet router and firewall B. Inline, before the internet router and firewall
  C. Promiscuously, after the Internet router and before the firewall
  D. Promiscuously, before the Internet router and the firewall
  A. Inline, behind the internet router and firewall B. Inline, before the internet router and firewall