[Free] 2017(June) Ensurepass Passguide Cisco 210-260 Actual Tests 81-90

Ensurepass
2017 June Cisco Official New Released 210-260 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/210-260.html

Implementing Cisco Network Security (IINS)

QUESTION 81

You have been tasked with blocking user access to website that violate company policy, but the site use dynamic IP Addresses. What is the best practice URL filtering to solve the problem?

 

A.

Enable URL filtering and create a blacklist to block the websites that violate company policy.

B.

Enable URL filtering and create a whitelist to allow only the websites the company policy allow users to access.

C.

Enable URL filtering and use URL categorization to allow only the websites the company policy allow users to access.

D.

Enable URL filtering and create a whitelist to block the websites that violate company policy.

E.

Enable URL filtering and use URL categorization to block the websites that violate company policy.

 

Correct Answer: E

 

 

QUESTION 82

Refer to the following command.

 

Crypto ipsec transform-set myset esp-md5-hmac esp-esp-aes-256

 

What is the effect of the given command?

 

A.

It configure the network to use a different transform set between peers.

B.

It merges authentication and encryption methods to protect traffic that matches an ACL.

C.

It configures encryption for MD5 HMAC.

D.

It configures authentications as AES 256.

 

Correct Answer: B

 

 

QUESTION 83

On which Cisco Configuration Professional screen do you enable AAA

 

A.

AAA Summary

B.

AAA Servers and Groups

C.

Authentication Policies

D.

Authorization Policies

 

Correct Answer: A

QUESTION 84

What are the three layers of a hierarchical network design? (Choose three.)

 

A.

core

B.

access

C.

server

D.

user

E.

internet

F.

distribution

 

Correct Answer: ABF

 

 

QUESTION 85

How can the administrator enable permanent client installation in a Cisco AnyConnect VPN firewall configuration?

 

A.

Issue the command anyconnect keep-installer under the group policy or username webvpn mode

B.

Issue the command anyconnect keep-installer installed in the global configuration

C.

Issue the command anyconnect keep-installer installed under the group policy or username webvpn mode

D.

Issue the command anyconnect keep-installer installer under th
e group policy or username webvpn mode

 

Correct Answer: C

 

 

QUESTION 86

Which statement correctly describes the function of a private VLAN?

 

A.

A private VLAN partitions the Layer 2 broadcast domain of a VLAN into subdomains

B.

A private VLAN partitions the Layer 3 broadcast domain of a VLAN into subdomains

C.

A private VLAN enables the creation of multiple VLANs using one broadcast domain

D.

A private VLAN combines the Layer 2 broadcast domains of many VLANs into one major broadcast domain

 

Correct Answer: A

 

 

QUESTION 87

How can you detect a false negative on an IPS?

 

A.

View the alert on the IPS

B.

Use a third-party to audit the next-generation firewall rules

C.

Review the IPS console

D.

Review the IPS log

E.

Use a third-party system to perform penetration testing

 

Correct Answer: E

 

 

 

 

QUESTION 88

What is the benefit of web application firewall?

 

A.

It accelerate web traffic.

B.

It blocks know vulnerabilities without patching applications.

C.

It supports all networking protocols.

D.

It simplifies troubleshooting.

 

Correct Answer: B

 

 

QUESTION 89

Which source port does IKE use when NAT has been detected between two VPN gateways?

 

A.

TCP 4500

B.

TCP 500

C.

UDP 4500

D.

UDP 500

 

Correct Answer: C

 

 

QUESTION 90

If a router configuration includes the line aaa authentication login default group tacacs+ enable, which events will occur when the TACACS+ server returns an error? (Choose two.)

 

A.

The user will be prompted to authenticate using the enable password.

B.

Authentication attempts to the router will be denied.

C.

Authentication will use the router`s local database.

D.

Authentication attempts will be sent to the TACACS+ server.

 

Correct Answer: AB

100% Free Download!
—Download Free Demo:210-260 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 210-260 Full Exam PDF and VCE Q&As:236
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.06.01-2017.06.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE