Cisco 500-260 Online Practice Questions and Exam Preparation

Cisco 500-260 Online Questions & Answers

• Question 41:

  Which three actions are supported by file policies? (Choose three.)

  A. malware cloud lookup
  B. Spero dynamic analysis
  C. block files
  D. detect malware
  E. bypass
  F. block malware
  A. malware cloud lookup
  C. block files
  F. block malware

• Question 42:

  Which threat score rating is the default value that identifies malware?

  A. greater than or equal to 80
  B. greater than or equal to 76
  C. greater than or equal to 75
  D. greater than or equal to 85
  B. greater than or equal to 76

• Question 43:

  Which Cisco Fire POWER services license must the administrator have to detect and monitor the unauthorized command-and-control network traffic?

  A. AVC
  B. WSE
  C. CWS
  D. AMP
  D. AMP

• Question 44:

  Which impact flag indicates that action is to be taken immediately?

  B. 1
  C. 5
  D. 4
  B. 1

• Question 45:

  Which option best describes the role of an IoC?

  A. tags on a host that indicate that an infection event has occurred
  B. statically assigned target values on a host
  C. a flag that indicates that a host operating system needs patching
  D. an impact flag of an infection event
  A. tags on a host that indicate that an infection event has occurred

• Question 46:

  Your IT department needs to run a custom-built TCP application within the clientless SSL VPN tunnel. The network administrator suggests running the smart tunnel application. Which three statements concerning smart tunnel applications are true? (Choose three.)

  A. They support active FTP and other RTSP-based applications.
  B. They do not require administrator privileges on the remote system.
  C. They require the enabling of port forwarding.
  D. They are supported on Windows and MAC OS X platforms.
  E. They support native client applications over SSL VPN.
  F. They require the modification of the Host file on the end-user PC.
  B. They do not require administrator privileges on the remote system.
  D. They are supported on Windows and MAC OS X platforms.
  E. They support native client applications over SSL VPN.

• Question 47:

  Refer to the exhibit.

  

  Which Cisco ASA CLI commands configure these static routes in the Cisco ASA routing table?

  A. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11
  B. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 1 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 1
  C. route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 2
  D. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11
  E. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 1 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 1
  F. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 2
  F. route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 2

• Question 48:

  When preconfiguring a Cisco AnyConnect profile for the user group, which file is output by the Cisco AnyConnect profile editor?

  A. user.ini
  B. user.html
  C. user.pcf
  D. user.xml
  D. user.xml

• Question 49:

  Which option is correct for configuring the SRF for passive, out-of-band traffic evaluation?

  A. sfr fail-close oob
  B. sfr monitor-only
  C. sfr fail-open monitor-only
  D. sfr passive-mode
  B. sfr monitor-only

• Question 50:

  In one custom dynamic application, the inside client connects to an outside server using TCP port 4444 and negotiates return client traffic in the port range of 5000 to 5500. The server then starts streaming UDP data to the client on the negotiated port in the specified range. Which Cisco ASA feature or command supports this custom dynamic application?

  A. TCP normalizer
  B. TCP intercept
  C. ip verify command
  D. established command
  E. tcp-map and tcp-options commands
  F. set connection advanced-options command
  D. established command