210-260 by Cisco Actual Free Exam Questions And Answers

Cisco Implementing Cisco Network Security - 210-260 Exam Practice Test

Question 1

Which information can you display by executing the show crypto ipsec sa command?

A. IPsec SAs established between two peers

B. proxy information for the connection between two peers

C. ISAKMP SAs that are established between two peers

D. recent changes to the IP address of a peer router

Discussion 0

Correct Answer: A Vote an answer

Question 2

Which statement about zone-based firewall configuration is true?

A. You can assign an interface to more than one interface.

B. Traffic that is desired to or sourced from the self-zone is denied by default.

C. Traffic is implicitly denied by default between interfaces the same zone.

D. The zone must be configured before a can be assigned.

Discussion 0

Correct Answer: D Vote an answer

Question 3

Which ports need to be active for AAA server to integrate with Microsoft AD

A. 443 & 389

B. 445 & 389

C. 443 & 8080

D. 445 & 8080

Discussion 0

Correct Answer: B Vote an answer

Question 4

What hash type does Cisco use to validate the integrity of downloaded images?

A. Md1

B. Sha2

C. Md5

D. Sha1

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Which type of firewall can act on the behalf of the end device?

A. Packet

B. Application

C. Proxy

D. Stateful packet

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

What port option in a PVLAN that can communicate with every other port?

A. Promiscuous ports

B. Community ports

C. Ethernet ports

D. Isolate ports

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

What feature defines a campus area network?

A. It has a single geographic location.

B. it lacks external connectivity.

C. It has a limited number of segments.

D. It has limited or restricted Internet access.

Discussion 0

Correct Answer: A Vote an answer

Question 8

Which command do you enter to verify the Phase 1 status of a VPN connection?

A. debug crypto isakmp

B. sh crypto session

C. sh crypto isakmp sa

D. sh crypto ipsec sa

Discussion 0

Correct Answer: C Vote an answer

Question 9

What features can protect the data plane? (Choose three.)

A. QoS

B. antispoofing

C. ACLs

D. policing

E. IPS

F. DHCP-snooping

Discussion 0

Correct Answer: B,C,F Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

If you have any question please leave me your email address, we will reply and send email to you in 12 hours.

Our Working Time: ( GMT 0:00-15:00 ) From Monday to Saturday

Support:

Contact now

Cisco Implementing Cisco Network Security - 210-260 Exam Practice Test

Contact Us

Useful Links

Latest Updated