Ensurepass
2017 June Cisco Official New Released 210-260 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/210-260.html

Implementing Cisco Network Security (IINS)

QUESTION 1

Which two services define cloud networks? (Choose two.)

 

A.

Infrastructure as a Service

B.

Platform as a Service

C.

Security as a Service

D.

Compute as a Service

E.

Tenancy as a Service

 

Correct Answer: AB

 

 

QUESTION 2

In which two situations should you use out-of-band management? (Choose two.)

 

A.

when a network device fails to forward packets

B.

when you require ROMMON access

C.

when management applications need concurrent access to the device

D.

when you require administrator access from multiple locations

E.

when the control plane fails to respond

 

Correct Answer: AB

 

 

QUESTION 3

In which three ways does the TACACS protocol differ from RADIUS? (Choose three.)

 

A.

TACACS uses TCP to communicate with the NAS.

B.

TACACS can encrypt the entire packet that is sent to the NAS.

C.

TACACS supports per-command authorization.

D.

TACACS authenticates and authorizes simultaneously, causing fewer packets to be transmitted.

E.

TACACS uses UDP to communicate with the NAS.

F.

TACACS encrypts only the password field in an authentication packet.

 

Correct Answer: ABC

 

 

QUESTION 4

According to Cisco best practices, which three protocols should the default ACL allow on an access port to enable wired BYOD devices to supply valid credentials and connect to the network? (Choose three.)

 

A.

BOOTP

B.

TFTP

C.

DNS

D.

MAB

E.

HTTP

F.

802.1x

 

Correct Answer: ABC

 

 

QUESTION 5

Which two next-generation encryption algorithms does Cisco recommend? (Choose two.)

 

A.

AES

B.

3DES

C.

DES

D.

MD5

E.

DH-1024

F.

SHA-384

 

Correct Answer: AF

 

 

QUESTION 6

Which three ESP fields can be encrypted during transmission? (Choose three.)

 

A.

Security Parameter Index

B.

Sequence Number

C.

MAC Address

D.

Padding

E.

Pad Length

F.

Next Header

 

Correct Answer: DEF

 

 

QUESTION 7

What are two default Cisco IOS privilege levels? (Choose two.)

 

A.

0

B.

1

C.

5

D.

7

E.

10

F.

15

 

Correct Answer: BF

 

 

QUESTION 8

Which two authentication types does OSPF support? (Choose two.)

 

A.

plaintext

B.

MD5

C.

HMAC

D.

AES 256

E.

SHA-1

F.

DES

 

Correct Answer: AB

 

 

QUESTION 9

Which two features do CoPP and CPPr use to protect the control plane? (Choose two.)

 

A.

QoS

B.

traffic classification

C.

access lists

D.

policy maps

E.

class maps

F.

Cisco Express Forwarding

 

Correct Answer: AB

 

 

QUESTION 10

Which two statements about stateless firewalls are true? (Choose two.)

 

A.

They compare the 5-tuple of each incoming packet against configurable rules.

B.

They cannot track connections.

C.

They are designed to work most efficiently with stateless protocols such as HTTP or HTTPS.

D.

Cisco IOS cannot implement them because the platform is stateful by nature.

E.

The Cisco ASA is implicitly stateless because it blocks all traffic by default.

 

Correct Answer: AB

100% Free Download!
—Download Free Demo:210-260 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 210-260 Full Exam PDF and VCE Q&As:236
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.06.01-2017.06.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE