Cisco 500-260 Online Practice Questions and Exam Preparation

Cisco 500-260 Online Questions & Answers

• Question 21:

  Datagram Transport Layer Security (DTLS) was introduced to solve performance issues. Which three are characteristics of DTLS? (Choose three.)

  A. It uses TLS to negotiate and establish DTLS connections.
  B. It uses DTLS to transmit datagrams.
  C. It is disabled by default.
  D. It uses TLS for data packet retransmission.
  E. It replaces underlying transport layer with UDP 443.
  F. It uses TLS to provide low-latency video application tunneling.
  A. It uses TLS to negotiate and establish DTLS connections.
  B. It uses DTLS to transmit datagrams.
  E. It replaces underlying transport layer with UDP 443.

• Question 22:

  When the Cisco ASA appliance is processing packets, which action is performed first?

  A. Check if the packet is permitted or denied by the inbound interface ACL.
  B. Check if the packet is permitted or denied by the outbound interface ACL.
  C. Check if the packet is permitted or denied by the global ACL.
  D. Check if the packet matches an existing connection in the connection table.
  E. Check if the packet matches an inspection policy.
  F. Check if the packet matches a NAT rule.
  D. Check if the packet matches an existing connection in the connection table.

• Question 23:

  Which application is required to enable Microsoft Active Directory identity integration for FirePOWER services?

  A. Sourcefire User Agent
  B. Microsoft Active Directory Manager
  C. Cisco Directory Agent
  D. Microsoft Active Directory Agent
  A. Sourcefire User Agent

• Question 24:

  When deploying clientless SSL VPN advanced application access, the administrator needs to collect information about the end-user system. Which three input parameters of an end-user system are important for the administrator to identify? (Choose three.)

  A. types of applications and application protocols that are supported
  B. types of encryption that are supported on the end-user system
  C. the local privilege level of the remote user
  D. types of wireless security that are applied to the end-user tunnel interface
  E. types of operating systems that are supported on the end-user system
  F. type of antivirus software that is supported on the end-user system
  A. types of applications and application protocols that are supported
  C. the local privilege level of the remote user
  E. types of operating systems that are supported on the end-user system

• Question 25:

  Which two settings are configurable as part of a health policy? (Choose two.)

  A. time-synchronization status
  B. user access
  C. intrusion policy preferences
  D. database status
  E. advanced malware protection
  A. time-synchronization status
  E. advanced malware protection

• Question 26:

  What are two benefits that are provided by file trajectory services? (Choose two.)

  A. identifies malware point of entry
  B. highlights attack-propagation paths
  C. provides endpoint operating system patches
  D. publishes malware gateways on a blacklist
  E. pushes personal firewall updates to endpoints
  A. identifies malware point of entry
  B. highlights attack-propagation paths

• Question 27:

  In which two ways is the Cisco ASA CWS subscription licensed? (Choose two.)

  A. term only
  B. term and seat
  C. term and application
  D. term and session
  E. free with purchase of WSE 5-year term subscription license
  A. term only
  B. term and seat

• Question 28:

  Which statement describes what happens during a file-disposition check for malware?

  A. The managed device extracts the pieces of file from the data stream, calculates a hash on each piece, and forwards each piece to the cloud for checking. If all pieces are clean, the original file is forwarded to the destination.
  B. The managed device extracts all pieces of a file before calculating a hash on the complete file. Each piece is forwarded to the destination with the final piece being released if the entire file is deemed clean.
  C. The managed device extracts all pieces of a file before calculating a hash on the complete file. If the entire file is deemed clean, it is forwarded to the destination.
  D. The managed device extracts the pieces of file from the data stream, calculates a hash on each piece, and forwards each piece to the cloud for checking. All pieces are also forwarded to the destination with the last piece being forwarded if it is deemed clean.
  B. The managed device extracts all pieces of a file before calculating a hash on the complete file. Each piece is forwarded to the destination with the final piece being released if the entire file is deemed clean.

• Question 29:

  Refer to the exhibit.

  

  Which command enables the stateful failover option?

  A. failover link MYFAILOVER GigabitEthernet0/2
  B. failover lan interface MYFAILOVER GigabitEthernet0/2
  C. failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10
  D. preempt
  E. failover group 1
  F. primary
  G. failover lan unit primary
  A. failover link MYFAILOVER GigabitEthernet0/2

• Question 30:

  Which two Cisco ASA licensing features are correct with Cisco ASA Software Version 8.3 and later? (Choose two.)

  A. Identical licenses are not required on the primary and secondary Cisco ASA appliance.
  B. Cisco ASA appliances configured as failover pairs disregard the time-based activation keys.
  C. Time-based licenses are stackable in duration but not in capacity.
  D. A time-based license completely overrides the permanent license, ignoring all permanently licensed features until the time-based license is uninstalled.
  A. Identical licenses are not required on the primary and secondary Cisco ASA appliance.
  C. Time-based licenses are stackable in duration but not in capacity.