210-260 Exam Questions

Which statement about Cisco ACS authentication and authorization is true?

What is the only permitted operation for processing multicast traffic on zone-based firewalls?

What is one requirement for locking a wired or wireless device from ISE?

Refer to the exhibit. What type of firewall would use the given cofiguration line?

What are two default Cisco IOS privilege levels? (Choose two)

What is the effect of the given command sequence?

Which tool can an attacker use to attempt a DDos attack?

how does the Cisco ASA use Active Directory to authorize VPN users?

Which statement about application blocking is true?

For what reason would you configure multiple security contexts on the ASA firewall?

What VPN feature allows Internet traffic and local LAN/WAN traffic to use the same network connection?

When is the best time to perform an anti-virus signature update?

What is the effect of the send-lifetime local 23:59:00 31 December 31 2013 infinite command?

Which Statement about personal firewalls is true?

Refer to the exhibit. While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show?

Which statement about a PVLAN isolated port configured on a switch is true?

Within an 802.1X enabled network with the Auth Fail feature configured, when does a switch port get placed into a restricted VLAN?

What type of security support is provided by the Open Web Application Security Project?

Refer to the exhibit. Which statement about the device time is true?

In what type of attack does an attacker virtually change a devices burned in address in an attempt to circumvent access lists and mask the device's true identity?

How does a zone-based firewall implementation handle traffic between Interfaces in the same Zone?

An attacker installs a rogue switch that sends superior BPDUs on your network. What is a possible result of this activity?

Which two next generation encryption algorithms does Cisco recommend? (Choose two)

In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three).

Which two features are commonly used CoPP and CPPr to protect the control plane? (Choose two.)

What is an advantage of implementing a Trusted Platform Module for disk encryption?

Refer to the exhibit. What is the effect of the given command sequence?

A specific URL has been identified as containing malware. What action can you take to block users from accidentaly visiting the URL and becoming infected with malware?

If you change the native VLAN on the port to an unused VLAN, what happens if an attacker attempts a double tagging attack?

What is an advantage of placing an IPS on the inside of a network?

Which three statements about Cisco host-based IPS soluations are true? (Choose three.)

Which syslog severity level is level number 7?

Which type of mirroring does SPAN technology perform?

Which tasks is the session management path responsible for? (Choose three.)

Which network device does NTP authenticate?

What hash type does Cisco use to validate the integrity of downloaded images?

Which option is the most effective placement of an IPS device within the infrastructure?

If a router configuration includes the line aaa authentication login default group tacacs+ enable, which events will occur when the TACACS+ server returns an error? (Choose two.)

Which alert protocol is used with Cisco IPS Manager Express to support up to 10 sensors?

Which type of address translation should be used when a Cisco ASA is in transparent mode?

Which components does HMAC use to determine the authenticity and integrity of a message? (Choose two.)

What is the default timeout interval during which a router waits for responses from a TACACS server before declaring a timeout failure?

Which RADIUS server authentication protocols are supported on Cisco ASA firewalls? (Choose three.)

Which command initializes a lawful intercept view?

Which security measures can protect the control plane of a Cisco router? (Choose two.)

Which statement about extended access lists is true?

Which protocols use encryption to protect the confidentiality of data transmitted between two parties? (Choose two.)

What are the primary attack methods of VLAN hopping? (Choose two.)

How can the administrator enable permanent client installation in a Cisco AnyConnect VPN firewall configuration?