Cisco 500-260 Online Practice Questions and Exam Preparation

Cisco 500-260 Online Questions & Answers

• Question 11:

  You are configuring bookmarks for the clientless SSL VPN portal without the use of plug-ins. Which three bookmark types are supported? (Choose three.)

  A. RDP
  B. HTTP
  C. FTP
  D. CIFS
  E. SSH
  F. Telnet
  B. HTTP
  C. FTP
  D. CIFS

• Question 12:

  Which access policy action should be applied if traffic is to pass without applying any additional inspection?

  A. trust
  B. allow
  C. permit
  D. monitor
  A. trust

• Question 13:

  Refer to the exhibit.

  

  Which traffic is permitted on the inside interface without any interface ACLs configured?

  A. any IP traffic input to the inside interface
  B. any IP traffic input to the inside interface destined to any lower security level interfaces
  C. only HTTP traffic input to the inside interface
  D. only HTTP traffic output from the inside interface
  E. No input traffic is permitted on the inside interface
  F. No output traffic is permitted on the inside interface
  C. only HTTP traffic input to the inside interface

• Question 14:

  Based on this NAT command below, drag the IP address network object on the left to the correct NAT address type on the right.

  nat (inside,outside) source dynamic 10.0.1.0_obj 192.168.1.7_obj destination static 209.165.200.226_Server 209.165.201.21_Server Select and Place:

  

  

• Question 15:

  Which three policy types are configured using Fire SIGHT Management Center? (Choose three.)

  A. remote access
  B. file
  C. health
  D. network discovery
  E. malware
  F. access list
  G. firewall
  B. file
  C. health
  D. network discovery

• Question 16:

  An SFR module has been installed in the adaptive security appliance. Which command must be executed on the module to establish connectivity to FireSIGHT Management Center?

  A. system install manager
  B. config manager fmc host
  C. config manager add
  D. system manager fmc
  B. config manager fmc host

• Question 17:

  Which port should be allowed to support communications between Sourcefire User Agent and FireSIGHT Management Center?

  A. TCP/3306
  B. TCP/3389
  C. UDP/3389
  D. TCP/443
  A. TCP/3306

• Question 18:

  Which security technique should be implemented to remediate after a threat is discovered?

  A. NGIPS ruleset
  B. retrospection
  C. web security deployment
  D. application control
  B. retrospection

• Question 19:

  A file-type embedded attack is an example of which IoC event category?

  A. security intelligence
  B. IPS
  C. malware
  D. firewall
  C. malware

• Question 20:

  Refer to the exhibit.

  

  When the user "contractor" Cisco AnyConnect tunnel is established, what type of Cisco ASA user restrictions are applied to the tunnel?

  A. full restrictions (no Cisco ASDM, no CLI, no console access)
  B. full restrictions (no read, no write, no execute permissions)
  C. full restrictions (CLI show commands and Cisco ASDM monitoring permissions only)
  D. full access with no restrictions
  D. full access with no restrictions