Ensurepass
2017 June Cisco Official New Released 210-260 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/210-260.html

Implementing Cisco Network Security (IINS)

QUESTION 151

Which statements about smart tunnels on a Cisco firewall are true? (Choose two.)

 

A.

Smart tunnels can be used by clients that do not have administrator privileges

B.

Smart tunnels support all operating systems

C.

Smart tunnels offer better performance than port forwarding

D.

Smart tunnels require the client to have the application installed locally

 

Correct Answer: AC

 

 

QUESTION 152

Which option is the most effective placement of an IPS device within the infrastructure?

 

A.

Inline, behind the internet router and firewall

B.

Inline, before the internet router and firewall

C.

Promiscuously, after the Internet router and before the firewall

D.

Promiscuously, before the Internet router and the firewall

 

Correct Answer: A

 

 

QUESTION 153

Which security measures can protect the control plane of a Cisco router? (Choose two.)

< span lang="EN-US" style="font-family: ; mso-font-kerning: 0pt; mso-no-proof: yes"> 

A.

CCPR

B.

Parser views

C.

Access control lists

D.

Port security

E.

CoPP

 

Correct Answer: AE

 

 

QUESTION 154


What is a possible reason for the error message?

 

Router(config)#aaa server?% Unrecognized command

 

A.

The command syntax requires a space after the word “server”.

B.

The command is invalid on the target device.

C.

The router is already running the latest operating system.

D.

The router is a new device on which the aaa new-model command must be applied before continuing.

 

Correct Answer: D

 

 

QUESTION 155

In which stage of an attack does the attacker discover devices on a target network?

 

A.

Reconnaissance

B.

Covering tracks

C.

Gaining access

D.

Maintaining access

 

Correct Answer: A

 

 

QUESTION 156

How many crypto map sets can you apply to a router interface?

 

A.

3

B.

2

C.

4

D.

1

 

Correct Answer: D

 

 

QUESTION 157

Which command verifies phase 1 of an IPsec VPN on a Cisco router?

 

A.

show crypto map

B.

show crypto ipsec sa

C.

show crypto isakmp sa

D.

show crypto engine connection active

 

Correct Answer: C

 

 

QUESTION 158

In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three)

 

A.

When matching ACL entries are configured

B.

When matching NAT entries are configured

C.

When the firewall requires strict HTTP inspection

D.

When the firewall requires HTTP inspection

E.

When the firewall receives a SYN-ACK packet

F.

When the firewall receives a SYN packet

 

Correct Answer: ABF

QUESTION 159

Which two services define cloud networks?

 

A.

Infrastructure as a Service

B.

Platform as a Service

C.

Security as a Service

D.

Compute as a Service

E.

Tenancy as a Service

 

Correct Answer: AB

 

 

QUESTION 160

Which options are filtering options used to display SDEE message types? (Choose two.)

 

A.

stop

B.

none

C.

error

D.

all

 

Correct Answer: CD

100% Free Download!
—Download Free Demo:210-260 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 210-260 Full Exam PDF and VCE Q&As:236
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.06.01-2017.06.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE