Cisco 500-260 Online Practice Questions and Exam Preparation

Cisco 500-260 Online Questions & Answers

• Question 31:

  Which three Fire POWER services features require a subscription license? (Choose three.)

  A. URL filtering
  B. AVC
  C. high availability
  D. AMP
  E. IPS
  F. identity visibility
  A. URL filtering
  D. AMP
  E. IPS

• Question 32:

  An inside client on the 10.0.0.0/8 network connects to an outside server on the 172.16.0.0/16 network using TCP and the server port of 2001. The inside client negotiates a client port in the range between UDP ports 5000 to 5500. The outside server then can start sending UDP data to the inside client on the negotiated port within the specified UDP port range. Which two options show the required Cisco ASA command(s) to allow this scenario? (Choose two.)

  A. access-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001 access-group INSIDE in interface inside
  B. access-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001 access-list INSIDE line 2 permit udp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq established access-group INSIDE in interface inside
  C. access-list OUTSIDE line 1 permit tcp 172.16.0.0 255.255.0.0 eq 2001 10.0.0.0 255.0.0.0 access-list OUTSIDE line 2 permit udp 172.16.0.0 255.255.0.0 10.0.0.0 255.0.0.0 eq 5000-5500 access-group OUTSIDE in interface outside
  D. access-list OUTSIDE line 1 permit tcp 172.16.0.0 255.255.0.0 eq 2001 10.0.0.0 255.0.0.0 access-list OUTSIDE line 2 permit udp 172.16.0.0 255.255.0.0 10.0.0.0 255.0.0.0 eq established access-group OUTSIDE in interface outside
  E. established tcp 2001 permit udp 5000-5500
  F. established tcp 2001 permit from udp 5000-5500
  G. established tcp 2001 permit to udp 5000-5500
  A. access-list INSIDE line 1 permit tcp 10.0.0.0 255.0.0.0 172.16.0.0 255.255.0.0 eq 2001 access-group INSIDE in interface inside
  G. established tcp 2001 permit to udp 5000-5500

• Question 33:

  Which Cisco ASA CLI command is used to enable HTTPS (Cisco ASDM) access from any inside host on the 10.1.16.0/20 subnet?

  A. http 10.1.16.0 0.0.0.0 inside
  B. http 10.1.16.0 0.0.15.255 inside
  C. http 10.1.16.0 255.255.240.0 inside
  D. http 10.1.16.0 255.255.255.255
  C. http 10.1.16.0 255.255.240.0 inside

• Question 34:

  Files may be submitted to the cloud-based sandbox for dynamic analysis using which two ports? (Choose two.)

  A. TCP/443
  B. TCP/80
  C. TCP/3389
  D. TCP/500
  E. TCP/32137
  A. TCP/443
  E. TCP/32137

• Question 35:

  Refer to the exhibit.

  

  Which statement describes the effect of the configuration?

  A. The SFR is configured to passively inspect traffic on all adaptive security appliance interfaces.
  B. If the SFR fails, redirected traffic that matches the service policy from the outside will be dropped.
  C. If the SFR fails, all traffic from the outside will be dropped.
  D. The SFR is configured as an inline inspector of traffic on all adaptive security appliance interfaces.
  B. If the SFR fails, redirected traffic that matches the service policy from the outside will be dropped.

• Question 36:

  On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

  A. inspect
  B. sysopt connection
  C. tcp-options
  D. parameters
  E. set connection advanced-options
  E. set connection advanced-options

• Question 37:

  Which three options are assignable file dispositions? (Choose three.)

  A. malware
  B. unassigned
  C. custom detection
  D. user-defined
  E. permit
  F. unknown
  A. malware
  C. custom detection
  F. unknown

• Question 38:

  Drag and drop each advanced application deployment option on the left to its correct definition on the right.

  Select and Place:

  

  

• Question 39:

  Which three options are characteristics of Web Type ACLs? (Choose three.)

  A. They are assigned per-connection profile.
  B. They are assigned per-user or per-group policy.
  C. They can be defined in the Cisco AnyConnect Profile Editor.
  D. They support URL pattern matching.
  E. They support implicit deny all at the end of the ACL.
  F. They support standard and extended WebType ACLs.
  B. They are assigned per-user or per-group policy.
  D. They support URL pattern matching.
  E. They support implicit deny all at the end of the ACL.

• Question 40:

  Drag the correct three access list entries (from the left) and drop them (on the right) in order that is used when the interface ACL and global ACL are configured. Not all access list entries are required.

  Select and Place: