Examcollection 210-260 VCE

1
Cisco- 210-260-Implementing Cisco Network
Security Pass Cisco 210-260 CCNA Security exam
with 100 Guarantee 100 REAL EXAM QUESTIONS
ANSWERS Get All PDF with Complete Questions
Answers File from http//www.examcollectionvce.co
m/vce-210-260.html 100 Exam Passing Guarantee
Money Back Assurance
2
SAMPLE QUESTIONS

• QUESTION 1
• Which two services define cloud networks? (Choose
  two.)
• Infrastructure as a Service
• Platform as a Service
• Security as a Service
• Compute as a Service
• Tenancy as a Service
• Answer AB

• Question 2
• In which two situations should you use
  out-of-band management? (Choose two.)
• when a network device fails to forward packets
• when you require ROMMON access
• when management applications need concurrent
  access to the device
• when you require administrator access from
  multiple locations
• when the control plane fails to respond
• Answer AB

3
Question 3 In which three ways does the TACACS
protocol differ from RADIUS? (Choose three.)

1. TACACS uses TCP to communicate with the NAS.
2. TACACS can encrypt the entire packet that is sent
   to the NAS.
3. TACACS supports per-command authorization.
4. TACACS authenticates and authorizes
   simultaneously, causing fewer packets to be
   transmitted.
5. TACACS uses UDP to communicate with the NAS.
6. TACACS encrypts only the password field in an
   authentication packet.

Answer ABC
Question 4 According to Cisco best practices,
which three protocols should the default ACL
allow on an access port to enable wired BYOD
devices to supply valid credentials and connect
to the network? (Choose three.)

• BOOTP
• TFTP
• DNS
• MAB
• HTTP
• F. 802.1x

Answer ABC
4

• Question 5
• Which two next-generation encryption algorithms
  does Cisco recommend? (Choose two.)
• AES
• 3DES
• DES
• MD5
• E. DH-1024
• F. SHA-384
• Answer AF

Question 6 Which two authentication types does
OSPF support? (Choose two.)

1. plaintext
2. MD5
3. HMAC
4. AES 256
5. SHA-1
6. DES

Answer AB
5

• Question 7
• Which two features do CoPP and CPPr use to
  protect the control plane? (Choose two.)
• QoS
• traffic classification
• access lists
• policy maps
• class maps
• Cisco Express Forwarding
• Answer AB

Question 8 Which two statements about stateless
firewalls are true? (Choose two.)

1. They compare the 5-tuple of each incoming packet
   against configurable rules.
2. They cannot track connections.
3. They are designed to work most efficiently with
   stateless protocols such as HTTP or HTTPS.
4. Cisco IOS cannot implement them because the
   platform is stateful by nature.
5. The Cisco ASA is implicitly stateless because it
   blocks all traffic by default.

Answer AB
6
Question 9 Which three statements about
host-based IPS are true? (Choose three.)

1. It can view encrypted files.
2. It can have more restrictive policies than
   network-based IPS.
3. It can generate alerts based on behavior at the
   desktop level.
4. It can be deployed at the perimeter.
5. It uses signature-based policies.
6. It works with deployed firewalls.

Answer ABC

• Question 10
• What three actions are limitations when running
  IPS in promiscuous mode? (Choose three.)
• deny attacker
• deny packet
• modify packet
• request block connection
• request block host
• reset TCP connection
• Answer ABC

7

• Get Special Discount This April OFFERING 10
  Discount USE Coupon Code April10
• Buy Complete Questions Answers File from
• 100 Exam Passing Guarantee Money Back
  Assurance
• PDF Version Test Engine Software Version
• 60 Days Free Updates Service
• Valid for All Countries

http//www.examcollectionvce.com/vce-210-
260.html