Cisco 210-260 Online Practice Questions and Exam Preparation

Cisco 210-260 Online Questions & Answers

• Question 81:

  What will happen with traffic if zone-pair created, but policy did not applied?

  A. All traffic will be droped.
  B. All traffic will be passed with logging.
  C. All traffic will be passed without logging.
  D. All traffic will be inspected.
  A. All traffic will be droped.

• Question 82:

  Which command verifies phase 1 of an IPsec VPN on a Cisco router?

  A. show crypto map
  B. show crypto ipsec sa
  C. show crypto isakmp sa
  D. show crypto engine connection active
  C. show crypto isakmp sa

• Question 83:

  Which command do you enter to verify the Phase 1 status of a VPN connection?

  A. debug crypto isakmp
  B. sh crypto session
  C. sh crypto isakmp sa
  D. sh crypto ipsec sa
  D. sh crypto ipsec sa

• Question 84:

  Which feature allows a dynamic PAT pool to select the next address in the PAT pool instead of the next port of an existing address?

  A. next IP
  B. round robin
  C. dynamic rotation
  D. NAT address rotation
  B. round robin

• Question 85:

  Which feature prevents loops by moving a nontrunking port into an errdisable state when a BPDU is received on that port?

  A. BPDU filter
  B. DHCP snooping
  C. PortFast
  D. BPDU guard
  D. BPDU guard

• Question 86:

  Which security measures can protect the control plane of a Cisco router? (Choose two.)

  A. CCPr
  B. Parser views
  C. Access control lists
  D. Port security
  E. CoPP
  A. CCPr
  E. CoPP

• Question 87:

  You are configuring a NAT rule on a Cisco ASA. Which description of a mapped interface is true?

  A. It is mandatory for identify NAT only
  B. It is optional in routed mode
  C. It is mandatory for all firewall modes
  D. It is optional in transparent mode
  B. It is optional in routed mode

• Question 88:

  What are two challenges faced when deploying host-level IPS? (Choose Two)

  A. The deployment must support multiple operating systems.
  B. It does not provide protection for offsite computers.
  C. It is unable to provide a complete network picture of an attack.
  D. It is unable to determine the outcome of every attack that it detects.
  E. It is unable to detect fragmentation attacks.
  A. The deployment must support multiple operating systems.
  C. It is unable to provide a complete network picture of an attack.

• Question 89:

  Which mechanism does the FireAMP Connector use to avoid conflicts with other security applications such as antivirus products?

  A. exclusions
  B. virtualization
  C. containers
  D. sandboxing
  A. exclusions

• Question 90:

  Refer to the exhibit. All ports on switch 1 have a primary VLAN of 300. Which devices can host 1 reach?

  

  A. Host 2
  B. Server
  C. Host 4
  D. Other devices within VLAN 303
  B. Server