2018 April Latest Cisco 210-260 Exam Dumps with PDF and VCE Free Updated Today! Following are some new 210-260 Real Exam Questions:
1.|2018 Latest Cisco 210-260 Exam Dumps (PDF & VCE) 368Q Download:
https://www.braindump2go.com/210-260.html
2.|2018 Latest Cisco 210-260 Exam Questions & Answers Download:
https://drive.google.com/drive/folders/0B75b5xYLjSSNV1RGaFJYZkxGWFk?usp=sharing
QUESTION 127
Which of the following statements about access lists are true? (Choose three.)
A. Extended access lists should be placed as near as possible to the destination
B. Extended access lists should be placed as near as possible to the source
C. Standard access lists should be placed as near as possible to the destination
D. Standard access lists should be placed as near as possible to the source
E. Standard access lists filter on the source address
F. Standard access lists filter on the destination address
Answer: BCE
QUESTION 128
In which stage of an attack does the attacker discover devices on a target network?
A. Reconnaissance
B. Covering tracks
C. Gaining access
D. Maintaining access
Answer: A
QUESTION 129
Which type of security control is defense in depth?
A. Threat mitigation
B. Risk analysis
C. Botnet mitigation
D. Overt and covert channels
Answer: A
QUESTION 130
On which Cisco Configuration Professional screen do you enable AAA?
A. AAA Summary
B. AAA Servers and Groups
C. Authentication Policies
D. Authorization Policies
Answer: A
QUESTION 131
What configure mode you used for the command ip ospf authentication-key c1$c0?
A. global
B. priviliged
C. in-line
D. interface
Answer: D
Explanation:
ip ospf authentication-key is used under interface configuration mode, so it’s in interface level, under global configuration mode. If it asks about interface level then choose that.
interface Serial0
ip address 192.16.64.1 255.255.255.0
ip ospf authentication-key c1$c0
QUESTION 132
What are two users of SIEM software? (Choose two)
A. performing automatic network audits
B. configuring firewall and IDS devices
C. alerting administrators to security events in real time
D. scanning emails for suspicious attachments
E. collecting and archiving syslog data
Answer: CE
Explanation:
The other choices are not functions of SIEM software.
QUESTION 133
If a packet matches more than one class map in an individual feature type’s policy map, how does the ASA handle the packet?
A. the ASA will apply the actions from only the last matching class maps it finds for the feature type.
B. the ASA will apply the actions from all matching class maps it finds for the feature type.
C. the ASA will apply the actions from only the most specific matching class map it finds for the feature type.
D. the ASA will apply the actions from only the first matching class maps it finds for the feature type
Answer: D
Explanation:
If it matches a class map for a given feature type, it will NOT attempt to match to any subsequent class maps.
QUESTION 134
What statement provides the best definition of malware?
A. Malware is tools and applications that remove unwanted programs.
B. Malware is a software used by nation states to commit cyber-crimes.
C. Malware is unwanted software that is harmful or destructive
D. Malware is a collection of worms, viruses and Trojan horses that is distributed as a single…..
Answer: C
QUESTION 135
Your security team has discovered a malicious program that has been harvesting the CEO’s email messages and the company’s user database for the last 6 months.
What are two possible types of attacks your team discovered?
A. social activism
B. advanced persistent threat
C. drive-by spyware
D. targeted malware
Answer: B
Explanation:
If required 2 answers in the real exam, please choose BD.
QUESTION 136
Which FirePOWER preprocessor engine is used to prevent SYN attacks?
A. Anomaly.
B. Rate-Based Prevention
C. Portscan Detection
D. Inline Normalization
Answer: B
QUESTION 137
What is the only permitted operation for processing multicast traffic on zone-based firewalls?
A. Stateful inspection of multicast traffic is supported only for the self-zone.
B. Stateful inspection of multicast traffic is supported only between the self-zone and the internal zone.
C. Only control plane policing can protect the control plane against multicast traffic.
D. Stateful inspection of multicast traffic is supported only for the internal zone
Answer: C
Explanation:
Stateful inspection of multicast traffic is NOT supported by Cisco Zone based firewalls OR Cisco Classic firewall.
!!!!RECOMMEND!!!!
1.|2018 Latest Cisco 210-260 Exam Dumps (PDF & VCE) 368Q Download:
https://www.braindump2go.com/210-260.html
2.|2018 Latest Cisco 210-260 Exam Study Guide: