Cisco 500-260 Online Practice Questions and Exam Preparation

Cisco 500-260 Online Questions & Answers

• Question 1:

  On Cisco ASA Software Version 8.3 and later, which two statements correctly describe the NAT table or NAT operations? (Choose two.)

  A. The NAT table has four sections.
  B. Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.
  C. Auto NAT also is referred to as Object NAT.
  D. Auto NAT configurations are found only in the first (top) section of the NAT table.
  E. The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.
  F. Twice NAT is required for hosts on the inside to be accessible from the outside.
  B. Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.
  C. Auto NAT also is referred to as Object NAT.

• Question 2:

  Which license is required on the Cisco ASA NGFW for an administrator to manage it securely from a remote laptop?

  A. AnyConnect Endpoint Assessment
  B. AnyConnect Premium
  C. AnyConnect for Mobile
  D. AnyConnect for Cisco VPN phone
  E. Cisco Secure Desktop
  B. AnyConnect Premium

• Question 3:

  Which Cisco SFR feature license is needed to allow a high school security administration to implement a policy to allow student access to only high-reputation websites?

  A. AVC
  B. Botnet Traffic Filtering
  C. URL
  D. NGIPS
  E. AMP
  C. URL

• Question 4:

  Refer to the exhibit.

  

  After a remote user established a Cisco AnyConnect session from a wireless card through the Cisco ASA appliance of a partner to a remote server, the user opened the Cisco AnyConnect VPN Client Statistics Details screen. What are the two sources of the IP addresses that are marked A and B? (Choose two.)

  A. IP address that is assigned to the wireless Ethernet adapter of the remote user
  B. IP address that is assigned to the remote user from the Cisco ASA address pool
  C. IP address of the Cisco ASA physical interface of the partner
  D. IP address of the Cisco ASA virtual HTTP server of the partner
  E. IP address of the default gateway router of the remote user
  F. IP address of the default gateway router of the partner
  B. IP address that is assigned to the remote user from the Cisco ASA address pool
  C. IP address of the Cisco ASA physical interface of the partner

• Question 5:

  Which three action ranges are in the NG IPS profile? (Choose three.)

  A. block only
  B. block and monitor
  C. block and do not monitor
  D. allow only
  E. allow and monitor
  F. allow and do not monitor
  B. block and monitor
  E. allow and monitor
  F. allow and do not monitor

• Question 6:

  Which four unicast or multicast routing protocols are supported by the Cisco ASA appliance? (Choose four.)

  A. RIP (v1 and v2)
  B. OSPF
  C. IS-IS
  D. BGP
  E. EIGRP
  F. Bidirectional PIM
  G. MOSPF
  H. PIM dense mode
  A. RIP (v1 and v2)
  B. OSPF
  E. EIGRP
  F. Bidirectional PIM

• Question 7:

  Refer to the exhibit.

  

  A NOC engineer needs to tune some postlogin parameters on an SSL VPN tunnel. From the information shown, where should the engineer navigate to, in order to find all the postlogin session parameters?

  A. "engineering" Group Policy
  B. "contractor" Connection Profile
  C. DefaultWEBVPNGroup Group Policy
  D. DefaultRAGroup Group Policy
  E. "engineer1" AAA/Local Users
  A. "engineering" Group Policy

• Question 8:

  A security administrator suspects that an internal system has been infected by malware and communicates with an external server.

  Which Cisco ASA NGFW license must the administrator have to detect and monitor the unauthorized command and control network traffic?

  A. AVC
  B. WSE
  C. CWS
  D. Botnet traffic
  D. Botnet traffic

• Question 9:

  Detection of an exploit kit that is installed on a device is an example of which IoC event category?

  A. security intelligence
  B. IPS
  C. malware
  D. firewall
  B. IPS

• Question 10:

  An access policy that uses URL reputation values is defined. Which option best describes what happens if a reputation is not available for a URL?

  A. The URL check is not triggered, and the default policy action is applied.
  B. The URL check fails, and the traffic is dropped.
  C. The URL check is unknown, and the traffic is quarantined.
  D. The URL check is not triggered and, by default, the user is prompted to take an action to permit or deny.
  A. The URL check is not triggered, and the default policy action is applied.