Cisco Implementing Cisco Network Security - 210-260 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which sequence is correct to configure NAT on an ASA in the ASDM GUI?

A. Configuration > NAT > Rules > Add B. Configuration > Rules > NAT > Add C. Configuration > Firewall > NAT Roles > Add D. Configuration > Firewall > NAT Rules > Add

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

what causes a client to be placed in a guest or restricted VLAN on an 802.1x enabled network?

A. When AAA new-model is enabled B. client entered wrong credentials multiple times. C. When 802.1X is not globally enabled on the Cisco catalyst switch D. client entered wrong credentials the first time

Discussion 0

Correct Answer: B Vote an answer

Question 3

What configure mode you used for the command ip ospf authentication-key c1$c0?

A. global B. Interface C. in-line D. privileged

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

Which feature of the Cisco Email Security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attacks?

A. contextual analysis B. holistic understanding of threats C. signature-based IPS D. graymail management and filtering

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

When an IPS device detects an email threat, which action can it take in response?

A. request an SNMP trace B. request an SNMP trap C. request an SNMP block D. request an SNMP fail

Discussion 0

Correct Answer: B Vote an answer

Question 6

The purpose of the RSA SecureID server/application is to provide what?

A. Authentication, authorization, accounting (AAA) functions B. 802.1X enforcement C. VPN access D. One-time password (OTP) capabilities

Discussion 0

Correct Answer: D Vote an answer

Question 7

Which command is used to verify a VPN connection is operational?

A. sh crypto ipsec sa B. sh crypto session C. sh crypto isakmp sa D. debug crypto isakmp

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which statement about command authorization and security contexts is true?

A. If command authorization is configured, it must be enabled on all contexts B. AAA settings are applied on a per-context basis C. The enable_15 user and admins with changeto permissions have different command authorization levels per context D. The changeto command invokes a new context session with the credentials of the currently logged-in user

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

What are two uses of SIEM software? (Choose two.)

A. performing automatic network audits B. collecting and archiving syslog data C. alerting administrators to security events in real time D. configuring firewall and IDS devices E. scanning email for suspicious attachments

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Which option is a characteristic of the RADIUS protocol?

A. offers multiprotocol support B. supports bi-directional challenge C. combines authentication and authorization in one process D. uses TCP

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

In which stage of an attack does the attacker discover devices on a target network?

A. Covering tracks B. Reconnaissance C. Maintaining access D. Gaining access

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

What are two challenges of using a network-based IPS? (Choose two )

A. It is unable to detect attacks across the entire network B. It requires additional storage and processor capacity on syslog servers. C. It must support multiple operating systems D. It is unable to determine whether a detected attack was successful. E. As the network expands, it requires you to add more sensors

Discussion 0

Correct Answer: A,E Vote an answer