210-260 Real Exam Dumps Questions and answers 81-90

Get Full Version of the Exam
http://www.EnsurePass.com/210-260.html

Question No.81

You have been tasked with blocking user access to websites that violate company policy, but the site use dynamic IP Addresses. What is the best practice URL filtering to solve the problem?

A.

Enable URL filtering and create a blacklist to block the websites that violate company policy.

B.

Enable URL filtering and create a whitelist to allow only the websites the company policy allow users to access.

C.

Enable URL filtering and use URL categorization to allow only the websites the company policy allow users to access.

D.

Enable URL filtering and create a whitelist to block the websites that violate company policy.

E.

Enable URL filtering and use URL categorization to block the websites that violate company policy.

Correct Answer: E

Question No.82

Refer to the following command.

Crypto ipsec transform-set myset esp-md5-hmac esp-esp-aes-256 What is the effect of the given command?

A.

It configure the network to use a different transform set between peers.

B.

It merges authentication and encryption methods to protect traffic that matches an ACL.

C.

It configures encryption for MD5 HMAC.

D.

It configures authentications as AES 256.

Correct Answer: B

Question No.83

On which Cisco Configuration Professional screen do you enable AAA

A.

AAA Summary

B.

AAA Servers and Groups

C.

Authentication Policies

D.

Authorization Policies

Correct Answer: A

Question No.84

What are the three layers of a hierarchical network design? (Choose three.)

A.

core

B.

access

C.

server

D.

user

E.

internet

F.

distribution

Correct Answer: ABF

Question No.85

How can the administrator enable permanent client installation in a Cisco AnyConnect VPN firewall configuration?

A.

Issue the command anyconnect keep-installer under the group policy or username webvpn mode

B.

Issue the command anyconnect keep-installer installed in the global configuration

C.

Issue the command anyconnect keep-installer installed under the group policy or username webvpn mode

D.

Issue the command anyconnect keep-installer installer under the group policy or username webvpn mode

Correct Answer: C

Question No.86

Which statement correctly describes the function of a private VLAN?

A.

A private VLAN partitions the Layer 2 broadcast domain of a VLAN into subdomains

B.

A private VLAN partitions the Layer 3 broadcast domain of a VLAN into subdomains

C.

A private VLAN enables the creation of multiple VLANs using one broadcast domain

D.

A private VLAN combines the Layer 2 broadcast domains of many VLANs into one major broadcast domain

Correct Answer: A

Question No.87

How can you detect a false negative on an IPS?

A.

View the alert on the IPS

B.

Use a third-party to audit the next-generation firewall rules

C.

Review the IPS console

D.

Review the IPS log

E.

Use a third-party system to perform penetration testing

Correct Answer: E

Question No.88

What is the benefit of web application firewall?

A.

It accelerate web traffic.

B.

It blocks know vulnerabilities without patching applications.

C.

It supports all networking protocols.

D.

It simplifies troubleshooting.

Correct Answer: B

Question No.89

Which source port does IKE use when NAT has been detected between two VPN gateways?

A.

TCP 4500

B.

TCP 500

C.

UDP 4500

D.

UDP 500

Correct Answer: C

Question No.90

If a router configuration includes the line aaa authentication login default group tacacs enable, which events will occur when the TACACS server returns an error? (Choose two.)

A.

The user will be prompted to authenticate using the enable password.

B.

Authentication attempts to the router will be denied.

C.

Authentication will use the router`s local database.

D.

Authentication attempts will be sent to the TACACS server.

Correct Answer: AB

Get Full Version of 210-260 Dumps

Leave a Reply

Your email address will not be published. Required fields are marked *