Implementing Cisco Network Security (210-260) Free Practice Test

Question 1

What IPSec mode is used to encrypt traffic between a server and VPN endpoint?

A. tunnel

B. Aggregated

C. Transport

D. Quick

E. Trunk

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Of all parameters that are negotiated for the IKE Phase 1 tunnel, which parameter is the only one that does not have to exactly match between VPN pees to be accepted?

A. DH group

B. Encryption algorithm

C. Lifetime

D. Hashing algorithm

E. Authentication method

F. Digital signature

Correct Answer: D

Question 3

Which two authentication types does OSPF support? (Choose two.)

A. DES

B. MD5

C. plaintext

D. SHA-1

E. HMAC

F. AES 256

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit.

Which line in this configuration prevents the HelpDesk user from modifying the interface configuration?

A. Privilege exec level 9 configure terminal

B. Username HelpDesk privilege 6 password help

C. Privilege exec level 10 interface

D. Privilege exec level 7 show start-up

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which of the following are IKE modes? (choose all and apply)

A. Fast Mode

B. Diffie-Hellman Mode

C. Quick Mode

D. Aggressive Mode

E. Main Mode

Correct Answer: C,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What is a limitation of network-based IPS?

A. It is most effective at the individual host level.

B. It is unable to monitor attacks across the entire network.

C. It must be individually configured to support every operating system on the network.

D. Large installations require numerous sensors to fully protect the network

Correct Answer: D

Question 7

Which type of IPS can identify worms that are propagating in a network?

A. Signature-based IPS

B. Reputation-based IPS

C. Anomaly-based IPS

D. Policy-based IPS

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which type of mirroring does SPAN technology perform?

A. Remote mirroring over Layer 2

B. Local mirroring over Layer 2

C. Local mirroring over Layer 3

D. Remote mirroring over Layer 3

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit.

Which ryope if NAT configured on a Cisco ASA?

A. Source identity NAT

B. Dynamic NAT

C. Identity twice NAT

D. Dynamic PAT

Correct Answer: D

Question 10

When connecting to an external resource, you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.201.30 Which option do you implement?

A. dynamic source NAT that uses an IP address as a mapped source

B. dynamic source NAT that uses a range as a mapped source

C. static destination NAT that uses a subnet as a real source

D. static destination NAT that uses a subnet as a real destination

Correct Answer: B

Question 11

In which stage of an attack does the attacker discover devices on a target network?

A. Gaining access

B. Maintaining access

C. Reconnaissance

D. Covering tracks

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Which three statements about Cisco host-based IPS solutions are true? (Choose three.)

A. It can be deployed at the perimeter.

B. It works with deployed firewalls.

C. It can view encrypted files.

D. It can generate alerts based on behavior at the desktop level.

E. It uses signature-based policies.

F. It can have more restrictive policies than network-based IPS.

Correct Answer: C,D,F

Question 13

If a personal Firewall specifically blocks NTP, which type of blocking is the firewall performing?

A. application

B. file

C. network

D. service

Correct Answer: A

Question 14

What is the range of levels provided by the Privilege command?

A. 1-15

B. 0-16

C. 1-14

D. 1-16

E. 0-15

F. 0-14

Correct Answer: A

Welcome to TestSimulate

Cisco Implementing Cisco Network Security (210-260) Free Practice Test