210-260 Latest Exam (May 2018)

[Free] 2018(May) Dumps4cert Passguide Cisco 210-260 Dumps with VCE and PDF Download 51-60

May 22, 2018

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 210-260
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Network Security

Question No: 51

Which 2 NAT type allows only objects or groups to reference an IP address?

  1. dynamic NAT

  2. dynamic PAT

  3. static NAT

  4. identity NAT

Answer: A,C Explanation:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_co nfig/nat_objects.html#18425

Question No: 52

Which security measures can protect the control plane of a Cisco router? (Choose two.)

  1. CCPr

  2. Parser views

  3. Access control lists

  4. Port security

  5. CoPP

Answer: A,E

Question No: 53

What improvement does EAP-FASTv2 provide over EAP-FAST?

  1. It allows multiple credentials to be passed in a single EAP exchange.

  2. It supports more secure encryption protocols.

  3. It allows faster authentication by using fewer packets.

  4. It addresses security vulnerabilities found in the original protocol.

Answer: A

Question No: 54

What do you use when you have a network object or group and want to use an IP address?

  1. Static NAT

  2. Dynamic NAT

  3. identity NAT

  4. Static PAT

Answer: B

Question No: 55

How does the Cisco ASA use Active Directory to authorize VPN users?

  1. It queries the Active Directory server for a specific attribute for the specified user.

  2. It sends the username and password to retrieve an ACCEPT or REJECT message from the Active Directory server.

  3. It downloads and stores the Active Directory database to query for future authorization requests.

  4. It redirects requests to the Active Directory server defined for the VPN group.

Answer: A

Question No: 56

Refer to the exhibit.

Dumps4Cert 2018 PDF and VCE

With which NTP server has the router synchronized?







Answer: A

Question No: 57

Which components does HMAC use to determine the authenticity and integrity of a message? (Choose two.)

  1. The password

  2. The hash

  3. The key

  4. The transform set

Answer: B,C

Question No: 58

What is a benefit of a web application firewall?

  1. It blocks known vulnerabilities without patching applications.

  2. It simplifies troubleshooting.

  3. It accelerates web traffic.

  4. It supports all networking protocols.

Answer: A

Question No: 59

If a switch port goes directly into a blocked state only when a superior BPDU is received, what mechanism must be in use?

  1. STP BPDU guard

  2. loop guard

  3. STP Root guard

  4. EtherChannel guard

Answer: A

Question No: 60

Which option is a weakness in an information system that an attacker might leverage to gain unauthorized access to the system or its data?

  1. hack

  2. mitigation

  3. risk

  4. vulnerability

  5. exploit

Answer: D

100% Dumps4cert Free Download!
Download Free Demo:210-260 Demo PDF
100% Dumps4cert Pass Guaranteed!
210-260 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No