Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 May Cisco Official New Released 210-260
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Network Security

Question No: 101

What command could you implement in the firewall to conceal internal IP address?

1. no source-route

2. no broadcast….

3. no proxy-arp

Answer: C

Question No: 102

When an IPS detects an attack, which action can the IPS take to prevent the attack from spreading?

1. Deny the connection inline.

2. Perform a Layer 6 reset.

3. Deploy an antimalware system.

4. Enable bypass mode.

Answer: A

Question No: 103

Which IPS detection method can you use to detect attacks that based on the attackers IP addresses?

1. Policy-based

2. Anomaly-based

3. Reputation-based

4. Signature-based

Answer: C

Question No: 104

In which three ways does the TACACS protocol differ from RADIUS? (Choose three.)

1. TACACS uses TCP to communicate with the NAS.

2. TACACS can encrypt the entire packet that is sent to the NAS.

3. TACACS supports per-command authorization.

4. TACACS authenticates and authorizes simultaneously, causing fewer packets to be transmitted.

5. TACACS uses UDP to communicate with the NAS.

6. TACACS encrypts only the password field in an authentication packet.

Answer: A,B,C

Question No: 105

Which two NAT types allows only objects or groups to reference an IP address? (choose two)

1. dynamic NAT

2. dynamic PAT

3. static NAT

4. identity NAT

Answer: A,C

Question No: 106

Which command will configure a Cisco ASA firewall to authenticate users when they enter the enable syntax using the local database with no fallback method?

1. aaa authentication enable console LOCAL SERVER_GROUP

2. aaa authentication enable console SERVER_GROUP LOCAL

3. aaa authentication enable console local

4. aaa authentication enable console LOCAL

Answer: D

Question No: 107

Which type of encryption technology has the broadcast platform support?

1. Middleware

2. Hardware

3. Software

4. File-level

Answer: C

Question No: 108

Which option is the cloud based security service from Cisco that provides URL filtering web browsing content security, and roaming user protection?

1. Cloud web security

2. Cloud web Protection

3. Cloud web Service

4. Cloud advanced malware protection

Answer: A

Question No: 109

What can the SMTP preprocessor in FirePOWER normalize?

1. It can extract and decode email attachments in client to server traffic.

2. It can look up the email sender.

3. It compares known threats to the email sender.

4. It can forward the SMTP traffic to an email filter server.

5. It uses the Traffic Anomaly Detector.

Answer: A

Question No: 110

In which three cases does the ASA firewall permit inbound HTTP GET requests during

normal operations? (Choose three).

1. when matching NAT entries are configured

2. when matching ACL entries are configured

3. when the firewall receives a SYN-ACK packet

4. when the firewall receives a SYN packet

5. when the firewall requires HTTP inspection

6. when the firewall requires strict HTTP inspection

Answer: A,B,D

100% Dumps4cert Free Download!
–Download Free Demo:210-260 Demo PDF
100% Dumps4cert Pass Guaranteed!
–210-260 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No