Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 71:

  What are two default behaviour of the traffic on a zone-based firewall? (Choose two.)

  A. The CBAC rules that are configure on router interface apply to zone interfaces.
  B. Communication is blocked between interfaces that are members of the same zone.
  C. Traffic within self zone uses an implicit deny all
  D. All traffic between zones is implicitly blocked.
  E. Communication is allowed beteen interfaces that are members of the same zone.
  D. All traffic between zones is implicitly blocked.
  E. Communication is allowed beteen interfaces that are members of the same zone.

• Question 72:

  What do you use when you have a network object or group and want to use an IP address?

  A. Static NAT
  B. Dynamic NAT
  C. identity NAT
  D. Static PAT
  B. Dynamic NAT

• Question 73:

  If a switch port goes directly into a blocked state only when a superior BPDU is received, what mechanism must be in use?

  A. STP BPDU guard
  B. loop guard
  C. STP Root guard
  D. EtherChannel guard
  C. STP Root guard

• Question 74:

  Which two statements about Telnet access to the ASA are true? (Choose two).

  A. You may VPN to the lowest security interface to telnet to an inside interface.
  B. You must configure an AAA server to enable Telnet.
  C. You can access all interfaces on an ASA using Telnet.
  D. You must use the command virtual telnet to enable Telnet.
  E. Best practice is to disable Telnet and use SSH.
  A. You may VPN to the lowest security interface to telnet to an inside interface.
  E. Best practice is to disable Telnet and use SSH.

• Question 75:

  Which command do you enter to verify the status and settings of an IKE Phase 1 tunnel?

  A. show crypto Ipsec as output
  B. show crypto isakmp policy
  C. show crypto isakmp sa
  D. show crypto ipsec transform-sat
  C. show crypto isakmp sa

• Question 76:

  Which security term refers to a person, property, or data of value to a company?

  A. Risk
  B. Asset
  C. Threat prevention
  D. Mitigation technique
  B. Asset

• Question 77:

  In which type of attack does an attacker send email message that ask the recipient to click a link such as https://www.cisco.net.cc/securelogs?

  A. pharming
  B. phishing
  C. solicitation
  D. secure transaction
  B. phishing

• Question 78:

  Which technology can best protect data at rest on a user system?

  A. network IPS
  B. router ACL
  C. full-disk encryption
  D. IPsec tunnel
  C. full-disk encryption

• Question 79:

  What does the DH group refer to?

  A. tunnel lifetime key
  B. length of key for authentication
  C. length of key for encryption
  D. length of key for key exchange
  E. length of key for hashing
  D. length of key for key exchange

• Question 80:

  Which SOURCEFIRE logging action should you choose to record the most detail about a connection.

  A. Enable logging at the beginning of the session
  B. Enable logging at the end of the session
  C. Enable alerts via SNMP to log events off-box
  D. Enable eStreamer to log events off-box
  B. Enable logging at the end of the session