210-260

Page No | 1

Thank you for purchasing Questions & Answers _____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________

http://www.. pass4surebraindumps.com/ http://www

Page No | 2

Product Questions: 186 Version: 13.0 Queson 1 Which two sevices dee cloud etwoks? (Choose two.) A. Ifastuctue as a Sevice B. Plaor as a Sevice C. Secuity as a Sevice D. Corpute as a Sevice E. Teacy as a Sevice

Aoswern A,B Queson 2 I which two situaos should you use out-of-bad raageret? (Choose two.) A. whe a etwok device fails to fowad packets B. whe you equie ROMMON access C. whe raageret applicaos eed cocuet access to the device D. whe you equie adriistato access for rulple locaos E. whe the cotol plae fails to espod

Aoswern A,B Queson 3 I which thee ways does the TACACS potocol die for RADIUS? (Choose thee.) A. TACACS uses TCP to corruicate with the NAS. B. TACACS ca ecypt the ee packet that is set to the NAS. C. TACACS suppots pe-corrad authoizao. D. TACACS authecates ad authoizes sirultaeously, causig fewe packets to be tasried. E. TACACS uses UDP to corruicate with the NAS. F. TACACS ecypts oly the passwod eld i a authecao packet.

Aoswern A,B,C Queson 4 Accodig to Cisco best pacces, which thee potocols should the default ACL allow o a access pot to eable wied BYOD devices to supply valid cedeals ad coect to the etwok? (Choose thee.)

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 3

A. BOOTP B. TFTP C. DNS D. MAB E. HTTP F. 802.1x

Aoswern A,B,C Queson 5 Which two ext-geeao ecypo algoithrs does Cisco ecorred? (Choose two.) A. AES B. 3DES C. DES D. MD5 E. DH-1024 F. SHA-384

Aoswern A,F Queson 6 Which thee ESP elds ca be ecypted duig tasrissio? (Choose thee.) A. Secuity Paarete Idex B. Sequece Nurbe C. MAC Addess D. Paddig E. Pad Legth F. Next N ext Heade

Aoswern D,E,F Queson 7 What ae two default Cisco IOS pivilege levels? (Choose two.) A. 0 B. 1 C. 5 D. 7 E. 10 F. 15

Aoswern B,F Queson 8

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 4

Which two authecao types does OSPF suppot? (Choose two.) A. plaitext B. MD5 C. HMAC D. AES 256 E. SHA-1 F. DES

Aoswern A,B Queson 9 Which two featues do CoPP ad CPP use to potect the cotol plae? (Choose two.) A. QoS B. tac classicao C. access lists D. policy raps E. class raps F. Cisco Expess Fowadig

Aoswern A,B Queson 10 Which two staterets about stateless ewalls ae tue? (Choose two.) A. They corpae the 5-tuple of each icorig packet agaist coguable ules. B. They caot tack coecos. C. They ae desiged to wok rost ecietly with stateless potocols such as HTTP o HTTPS. D. Cisco IOS caot irpleret ther because the plaor is stateful by atue. E. The Cisco ASA is irplicitly stateless because it blocks all tac by default.

Aoswern A,B Queson 11 Which thee staterets about host-based IPS ae tue? (Choose thee.) A. It ca view ecypted les. B. It ca have roe esticve policies tha etwok-based IPS. C. It ca geeate alets based o behavio at the desktop level. D. It ca be deployed at the peirete. E. It uses sigatue-based policies. F. It woks with deployed ewalls.

Aoswern A,B,C

________________________________________________________________________________________________

http://www. pass4surebraindumps.com/

Page No | 5

Queson 12 What thee acos ae liritaos whe uig IPS i poriscuous rode? (Choose thee.) A. dey aacke B. dey packet C. rodify packet D. equest block coeco E. equest block host F. eset TCP coeco

Aoswern A,B,C Queson 13 Whe a IPS detects a aack, which aco ca the IPS take to pevet the aack for speadig? A. Dey the coeco ilie. B. Pefor a Laye 6 eset. C. Deploy a aralwae syster. D. Eable bypass rode.

Aoswern A Queson 14 What is a advatage of irplereg a Tusted Plaor Module fo disk ecypo? A. It povides hadwae authecao. B. It allows the had disk to be tasfeed to aothe device without equiig e-ecypo.dis C. It suppots a roe corplex ecypo algoithr tha othe disk-ecypo techologies. D. It ca potect agaist sigle poits of failue.

Aoswern A Queson 15 What is the pupose of the Itegity corpoet of the CIA tiad? A. to esue that oly authoized paes ca rodify data B. to deterie whethe data is elevat C. to ceate a pocess fo accessig data D. to esue that oly authoized paes ca view data

Aoswern A Queson 16

________________________________________________________________________________________________


Page No | 6

I a secuity cotext, which aco ca you take to addess corpliace? A. Irpleret ules to pevet a vuleability. B. Coect o couteact a vuleability. C. Reduce the seveity of a vuleability. D. Follow diecos for the secuity appliace raufactue to erediate a vuleability.

Aoswern A Queson 17 Which type of secue coecvity does a extaet povide? A. othe corpay etwoks to you corpay etwok B. erote bach oces to you corpay etwok C. you corpay etwok to the Iteet D. ew etwoks to you corpay etwok

Aoswern A Queson 18 Which tool ca a aacke use to aerpt a DDoS aack? A. botet B. Toja hose C. vius D. adwae

Aoswern A Queson 19 What type of secuity suppot is povided by the Ope Web Applicao Secuity Poject? A. Educao about corro Web site vuleabilies. B. A Web site secuity farewok. C. A secuity discussio four fo Web site developes. D. Scoig of corro vuleabilies ad exposues.

Aoswern A Queson 20 What type of aack was the Stuxet vius? A. cybe wafae B. hackvisr

________________________________________________________________________________________________


Page No | 7

C. botet D. social egieeig

Aoswern A Queson 21 What type of algoithr uses the sare key to ecypt ad decypt data? A. a syrretic algoithr B. a asyrretic algoithr C. a Public Key Ifastuctue algoithr D. a IP secuity algoithr

Aoswern A Queson 22 Refe to the exhibit.

How ray res was a ead-oly stig used to aerpt a wite opeao? A. 9 B. 6 C. 4 D. 3

________________________________________________________________________________________________


Page No | 8

E. 2


Which stateret about the device re is tue? A. The re is authoitave, but the NTP pocess has lost cotact with its seves. B. The re is authoitave because the clock is i syc. C. The clock is out of syc. D. NTP is cogued icoectly. E. The re is ot authoitave.

Aoswern A Queson 24 How does the Cisco ASA use Acve Diectoy to authoize VPN uses? A. It queies the Acve Diectoy seve fo a specic aibute fo the specied use. B. It seds the useare ad passwod to etieve a ACCEPT o REJECT ressage for the Acve Diectoy seve. C. It dowloads ad stoes the Acve Diectoy database to quey fo futue authoizao equests. D. It ediects equests to the Acve Diectoy seve deed fo the VPN goup.

Aoswern A Queson 25 Which stateret about Cisco ACS authecao ad authoizao is tue? A. ACS seves ca be clusteed to povide scalability. B. ACS ca quey rulple Acve Diectoy dorais. C. ACS uses TACACS to poxy othe authecao seves. D. ACS ca use oly oe authoizao pole to allow o dey equests.


________________________________________________________________________________________________


Page No | 9

If a supplicat supplies icoect cedeals fo all authecao rethods cogued o the switch, how will the switch espod? A. The supplicat will fail to advace beyod the webauth rethod. B. The switch will cycle though the cogued authecao rethods ideitely. C. The authecao aerpt will re out ad the switch will place the pot ito the uauthoized state. D. The authecao aerpt will re out ad the switch will place the pot ito VLAN 101.

Aoswern A Queson 27 Which EAP rethod uses Potected Access Cedeals? A. EAP-FAST B. EAP-TLS C. EAP-PEAP D. EAP-GTC

Aoswern A Queson 28 What is oe equieret fo lockig a wied o wieless device for ISE? A. The ISE aget rust be istalled o the device. B. The device rust be coected to the etwok whe the lock corrad is executed. C. The use rust appove the lockig aco. D. The ogaizao rust irpleret a acceptable use policy allowig device lockig.

Aoswern A Queson 29 What VPN featue allows tac to exit the secuity appliace though the sare iteface it eteed? A. haipiig B. NAT C. NAT tavesal

________________________________________________________________________________________________


Page No | 10

D. split tuelig

Aoswern A Queson 30 What VPN featue allows Iteet tac ad local LAN/WAN tac to use the sare etwok coeco? A. split tuelig B. haipiig C. tuel rode D. taspaet rode


What is the eect of the give corrad sequece? A. It cogues IKE Phase 1. B. It cogues a site-to-site VPN tuel. C. It cogues a cypto policy with a key size of 14400. D. It cogues IPSec Phase 2.


What is the eect of the give corrad sequece? A. It dees IPSec policy fo tac souced for 10.10.10.0/24 with a desao of 10.100.100.0/24. B. It dees IPSec policy fo tac souced for 10.100.100.0/24 with a desao of 10.10.10.0/24. C. It dees IKE policy fo tac souced for 10.10.10.0/24 with a desao of 10.100.100.0/24.

________________________________________________________________________________________________


Page No | 11

D. It dees IKE policy fo tac souced for 10.100.100.0/24 with a desao of 10.10.10.0/24.


While toubleshoog site-to-site VPN, you issued the show cypto isakrp sa corrad. What does the give output show? A. IPSec Phase 1 is established betwee 10.10.10.2 ad 10.1.1.5. B. IPSec Phase 2 is established betwee 10.10.10.2 ad 10.1.1.5. C. IPSec Phase 1 is dow due to a QM_IDLE state. D. IPSec Phase 2 is dow due to a QM_IDLE state.


While toubleshoog site-to-site VPN, you issued the show cypto ipsec sa corrad. What does the give output show? A. IPSec Phase 2 is established betwee 10.1.1.1 ad 10.1.1.5. B. ISAKMP secuity associaos ae established betwee 10.1.1.5 ad 10.1.1.1. C. IKE vesio 2 secuity associaos ae established betwee 10.1.1.1 ad 10.1.1.5. D. IPSec Phase 2 is dow due to a risratch betwee ecypted ad decypted packets.

Aoswern A Queson 35 Ae eloadig a oute, you issue the di corrad to veify the istallao ad obseve that the irage le appeas to be rissig. Fo what easo could the irage le fail to appea i the di

________________________________________________________________________________________________


Page No | 12

output? A. The secue boot-irage corrad is cogued. B. The secue boot-cort corrad is cogued. C. The cofeg 0x24 corrad is cogued. D. The eload corrad was issued for ROMMON.

Aoswern A Queson 36 What is the eect of the sed-lifere local 23:59:00 31 Decerbe 31 2013 iite corrad? A. It cogues the device to begi tasrig the authecao key to othe devices at 00:00:00 local re o Jauay 1, 2014 ad coue usig the key ideitely. B. It cogues the device to begi tasrig the authecao key to othe devices at 23:59:00 local re o Decerbe 31, 2013 ad coue usig the key ideitely. C. It cogues the device to begi accepg the authecao key for othe devices irrediately ad stop accepg the key at 23:59:00 local re o Decerbe 31, 2013. D. It cogues the device to geeate a ew authecao key ad tasrit it to othe devices at 23:59:00 local re o Decerbe 31, 2013. E. It cogues the device to begi accepg the authecao key for othe devices at 23:59:00 local re o Decerbe 31, 2013 ad coue accepg the key ideitely. F. It cogues the device to begi accepg the authecao key for othe devices at 00:00:00 local re o Jauay 1, 2014 ad coue accepg the key ideitely.

Aoswern B Queson 37 What type of packet ceates ad pefors etwok opeaos o a etwok device? A. cotol plae packets B. data plae packets C. raageret plae packets D. sevices plae packets

Aoswern A Queson 38 A aacke istalls a ogue switch that seds supeio BPDUs o you etwok. What is a possible esult of this acvity? A. The switch could oe fake DHCP addesses. B. The switch could becore the oot bidge. C. The switch could be allowed to joi the VTP dorai. D. The switch could becore a taspaet bidge.

________________________________________________________________________________________________


Page No | 13

Aoswern B Queson 39 I what type of aack does a aacke vitually chage a device's bued-i addess i a aerpt to cicurvet access lists ad rask the device's tue idety? A. gatuitous ARP B. ARP poisoig C. IP spoog D. MAC spoog

Aoswern D Queson 40 What corrad ca you use to veify the bidig table status? A. show ip dhcp soopig database B. show ip dhcp soopig bidig C. show ip dhcp soopig stascs D. show ip dhcp pool E. show ip dhcp souce bidig F. show ip dhcp soopig

Aoswern A Queson 41 If a switch eceives a supeio BPDU ad goes diectly ito a blocked state, what rechaisr rust be i use? A. poast B. EtheChael guad C. loop guad D. BPDU guad

Aoswern D Queson 42 Which stateret about a PVLAN isolated pot cogued o a switch is tue? A. The isolated pot ca corruicate oly with the poriscuous pot. B. The isolated pot ca corruicate with othe isolated pots ad the poriscuous pot. C. The isolated pot ca corruicate oly with corruity pots. D. The isolated pot ca corruicate oly with othe isolated pots.

________________________________________________________________________________________________


Page No | 14

Aoswern A Queson 43 If you chage the ave VLAN o the tuk pot to a uused VLAN, what happes if a aacke aerpts a double-taggig aack? A. The tuk pot would go ito a eo-disabled state. B. A VLAN hoppig aack would be successful. C. A VLAN hoppig aack would be peveted. D. The aacked VLAN will be pued.

Aoswern C Queson 44 What is a easo fo a ogaizao to deploy a pesoal ewall? A. To potect edpoits such as desktops for ralicious acvity. B. To potect oe vitual etwok segret for aothe. C. To deterie whethe a host reets riirur secuity postue equierets. D. To ceate a sepaate, o-pesistet vitual evioret that ca be destoyed ae a sessio. E. To potect the etwok for DoS ad sy-ood aacks.

Aoswern A Queson 45 Which stateret about pesoal ewalls is tue? A. They ca potect a syster by deyig pobig equests. B. They ae esiliet agaist keel aacks. C. They ca potect erail ressages ad pivate docurets i a sirila way to a VPN. D. They ca potect the etwok agaist aacks.


What type of ewall would use the give coguao lie? A. a stateful ewall B. a pesoal ewall C. a poxy ewall D. a applicao ewall

________________________________________________________________________________________________


Page No | 15

E. a stateless ewall

Aoswern A Queson 47 What is the oly peried opeao fo pocessig rulcast tac o zoe-based ewalls? A. Oly cotol plae policig ca potect the cotol plae agaist rulcast tac. B. Stateful ispeco of rulcast tac is suppoted oly fo the self-zoe. C. Stateful ispeco fo rulcast tac is suppoted oly betwee the self-zoe ad the iteal zoe. D. Stateful ispeco of rulcast tac is suppoted oly fo the iteal zoe.

Aoswern A Queson 48 How does a zoe-based ewall irpleretao hadle tac betwee itefaces i the sare zoe? A. Tac betwee two itefaces i the sare zoe is allowed by default. B. Tac betwee itefaces i the sare zoe is blocked uless you cogue the sare-secuity perit corrad. C. Tac betwee itefaces i the sare zoe is always blocked. D. Tac betwee itefaces i the sare zoe is blocked uless you apply a sevice policy to the zoe pai.

Aoswern A Queson 49 Which two staterets about Telet access to the ASA ae tue? (Choose two). A. You ray VPN to the lowest secuity iteface to telet to a iside iteface. B. You rust cogue a AAA seve to eable Telet. C. You ca access all itefaces o a ASA usig Telet. D. You rust use the corrad vitual telet to eable Telet. E. Best pacce is to disable Telet ad use SSH.

Aoswern A,E Queson 50 Which stateret about corruicao ove failove itefaces is tue? A. All iforao that is set ove the failove ad stateful failove itefaces is set as clea text by default. B. All iforao that is set ove the failove iteface is set as clea text, but the stateful failove lik is ecypted by default.

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 16

C. All ifora iforao o that is set set ove ove the failove failove ad state stateful ful failove failove itef iteface acess is ecyp ecypted ted by default. D. Use ares, passwods, ad peshaed keys ae ecypted by default whe they ae set ove the failove ad stateful failove itefaces, but othe iforao is set as clea text.

Aoswern A Queson 51 If a packet ratches roe tha oe class rap i a idividual featue type's policy rap, how does the ASA hadle the packet? A. The ASA will apply the acos for oly the st ratchig class rap it ds fo the featue type. B. The ASA will apply the acos for oly the rost specic ratchig class rap it ds fo the featue type. C. The ASA will apply the acos for all ratchig class raps it ds fo the featue type. D. The ASA will apply the acos for oly the last ratchig class rap it ds fo the featue type.

Aoswern A Queson 52 Fo what easo would you cogue rulple secuity cotexts o the ASA ewall? A. To sepaate dieet depatrets ad busiess uits. B. To eable the use of VRFs o outes that ae adjacetly coected. C. To povide edudacy ad high availability withi the ogaizao. D. To eable the use of rulcast oug ad QoS though the ewall.

Aoswern A Queson 53 What is a advatage of placig a IPS o the iside of a etwok? A. It ca povide highe thoughput. B. It eceives tac that has aleady bee lteed. C. It eceives evey iboud packet. D. It ca povide geate secuity.

Aoswern B Queson 54 What is the FiePOWER irpact ag used fo? A. A value that idicates the poteal seveity of a aack. B. A value that the adriistato assigs to each sigatue. C. A value that sets the pioity of a sigatue.

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 17

D. A value that reasues the applicao awaeess.

Aoswern A Queson 55 Which FiePOWER pepocesso egie is used to pevet SYN aacks? A. Rate-Based Peveo B. Potsca Deteco C. IP Defagretao D. Ilie Noralizao

Aoswern A Queson 56 Which Soucee loggig aco should you choose to ecod the rost detail about a coeco? A. Eable loggig at the ed of the sessio. B. Eable loggig at the begiig of the sessio. C. Eable alets via SNMP to log evets o-box. D. Eable eSteare to log evets o-box.

Aoswern A Queson 57 What ca the SMTP pepocesso i FiePOWER oralize? A. It ca extact ad decode erail aachrets i cliet to seve tac. B. It ca look up the erail sede. C. It corpaes kow theats to the erail sede. D. It ca fowad the SMTP tac to a erail lte seve. E. It uses the Tac Aoraly Detecto.

Aoswern A Queson 58 You wat to allow all of you corpay's uses to access the Iteet without allowig othe Web seves to collect the IP addesses of idividual uses. What two soluos ca you use? (Choose two). A. Cogue a poxy seve to hide uses' local IP addesses. B. Assig uique IP addesses to all uses. C. Assig the sare IP addess to all uses. D. Istall a Web cotet lte to hide uses' local IP addesses. E. Cogue a ewall to use Pot Addess Taslao.

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 18

Aoswern A,E Queson 59 You have irplereted a Soucee IPS ad cogued it to block cetai addesses ulizig Secuity Itelligece IP Addess Reputao. A use calls ad is ot able to access a cetai IP addess. What aco ca you take to allow the use access to the IP addess? A. Ceate a whitelist ad add the appopiate IP addess to allow the tac. B. Ceate a custor blacklist to allow the tac. C. Ceate a use based access cotol ule to allow the tac. D. Ceate a etwok based access cotol ule to allow the tac. E. Ceate a ule to bypass ispeco to allow the tac.

Aoswern A Queson 60 A specic URL has bee ideed as cotaiig ralwae. What aco ca you take to block uses for accidetally visig the URL ad becorig ifected with ralwae. A. Eable URL lteig o the peirete oute ad add the URLs you wat to block to the oute's local URL list. B. Eable URL lteig o the peirete ewall ad add the URLs you wat to allow to the oute's local URL list. C. Eable URL lteig o the peirete oute ad add the URLs you wat to allow to the ewall's local URL list. D. Ceate a blacklist that cotais the URL you wat to block ad acvate the blacklist o the peirete oute. E. Ceate a whitelist that cotais the URLs you wat to allow ad acvate the whitelist o the peirete oute.

Aoswern A Queson 61 Whe is the best re to pefor a a-vius sigatue update? A. Evey re a ew update is available. B. Whe the local scae has detected a ew vius. C. Whe a ew vius is discoveed i the wild. D. Whe the syster detects a bowse hook.

Aoswern A Queson 62 Which stateret about applicao blockig is tue?

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 19

A. It blocks access to specic pogars. B. It blocks access to les with specic extesios. C. It blocks access to specic etwok addesses. D. It blocks access to specic etwok sevices.

Aoswern A Queson 63 Sceaio I this sirulao, you have access to ASDM oly. Review the vaious ASA coguaos usig ASDM the aswe the ve rulple choice quesos about the ASA SSLVPN coguaos. To access ASDM, click the ASA ico i the topology diagar. Note: Not all ASDM fucoalies ae eabled i this sirulao. To see all the reu opos available o the le avigao pae, you ray also eed to u-expad the expaded reu st.

________________________________________________________________________________________________


Page No | 20

________________________________________________________________________________________________


Page No | 21

________________________________________________________________________________________________


Page No | 22

________________________________________________________________________________________________


Page No | 23

________________________________________________________________________________________________


Page No | 24

________________________________________________________________________________________________


Page No | 25

________________________________________________________________________________________________


Page No | 26

________________________________________________________________________________________________


Page No | 27

________________________________________________________________________________________________


Page No | 28

________________________________________________________________________________________________


Page No | 29

________________________________________________________________________________________________


Page No | 30

________________________________________________________________________________________________


Page No | 31

________________________________________________________________________________________________


Page No | 32

________________________________________________________________________________________________


Page No | 33

________________________________________________________________________________________________


Page No | 34

________________________________________________________________________________________________


Page No | 35

________________________________________________________________________________________________


Page No | 36

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 37

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 38

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 39

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 40

________________________________________________________________________________________________


Page No | 41

________________________________________________________________________________________________


Page No | 42

________________________________________________________________________________________________


Page No | 43

________________________________________________________________________________________________


Page No | 44

________________________________________________________________________________________________


Page No | 45

________________________________________________________________________________________________


Page No | 46

________________________________________________________________________________________________


Page No | 47

________________________________________________________________________________________________


Page No | 48

Which fou tuelig potocols ae eabled i the DtGpPolicy goup policy? (Choose fou) A. Clietless SSL VPN

________________________________________________________________________________________________


Page No | 49

B. SSL VPN Cliet C. PPTP D. L2TP/IPsec E. IPsec IKEv1 F. IPsec IKEv2

Aoswern A,D,E,F Explaao: By clickig oe the Coguao-> Rerote Access -> Clietless CCL VPN Access-> Goup Policies tab you ca view the DtGpPolicy potocols as show below:

Queson 64 Sceaio I this sirulao, you have access to ASDM oly. Review the vaious ASA coguaos usig ASDM the aswe the ve rulple choice quesos about the ASA SSLVPN coguaos. To access ASDM, click the ASA ico i the topology diagar. Note: Not all ASDM fucoalies ae eabled i this sirulao. To see all the reu opos available o the le avigao pae, you ray also eed to u-expad the expaded reu st.

________________________________________________________________________________________________


Page No | 50

________________________________________________________________________________________________


Page No | 51

________________________________________________________________________________________________


Page No | 52

________________________________________________________________________________________________


Page No | 53

________________________________________________________________________________________________


Page No | 54

________________________________________________________________________________________________


Page No | 55

________________________________________________________________________________________________


Page No | 56

________________________________________________________________________________________________


Page No | 57

________________________________________________________________________________________________


Page No | 58

________________________________________________________________________________________________


Page No | 59

________________________________________________________________________________________________


Page No | 60

________________________________________________________________________________________________


Page No | 61

________________________________________________________________________________________________


Page No | 62

________________________________________________________________________________________________


Page No | 63

________________________________________________________________________________________________


Page No | 64

________________________________________________________________________________________________


Page No | 65

________________________________________________________________________________________________


Page No | 66

________________________________________________________________________________________________


Page No | 67

________________________________________________________________________________________________


Page No | 68

________________________________________________________________________________________________


Page No | 69

________________________________________________________________________________________________


Page No | 70

________________________________________________________________________________________________


Page No | 71

________________________________________________________________________________________________


Page No | 72

________________________________________________________________________________________________


Page No | 73

________________________________________________________________________________________________


Page No | 74

________________________________________________________________________________________________


Page No | 75

________________________________________________________________________________________________


Page No | 76

________________________________________________________________________________________________


Page No | 77

________________________________________________________________________________________________


Page No | 78

________________________________________________________________________________________________


Page No | 79

Which use authecao rethod is used whe uses logi to the Clietless SSLVPN potal usig hps://209.165.201.2/test?

________________________________________________________________________________________________


Page No | 80

A. AAA with LOCAL database B. AAA with RADIUS seve C. Cecate D. Both Cecate ad AAA with LOCAL database E. Both Cecate ad AAA with RADIUS seve

Aoswern A Explaao: This ca be see for the Coeco Poles Tab of the Rerote Access VPN coguao, whee the alias of test is beig used,


________________________________________________________________________________________________


Page No | 81

________________________________________________________________________________________________


Page No | 82

________________________________________________________________________________________________


Page No | 83

________________________________________________________________________________________________


Page No | 84

________________________________________________________________________________________________


Page No | 85

________________________________________________________________________________________________


Page No | 86

________________________________________________________________________________________________


Page No | 87

________________________________________________________________________________________________


Page No | 88

________________________________________________________________________________________________


Page No | 89

________________________________________________________________________________________________


Page No | 90

________________________________________________________________________________________________


Page No | 91

________________________________________________________________________________________________


Page No | 92

________________________________________________________________________________________________


Page No | 93

________________________________________________________________________________________________


Page No | 94

________________________________________________________________________________________________


Page No | 95

________________________________________________________________________________________________


Page No | 96

________________________________________________________________________________________________


Page No | 97

________________________________________________________________________________________________


Page No | 98

________________________________________________________________________________________________


Page No | 99

________________________________________________________________________________________________


Page No | 100

________________________________________________________________________________________________


Page No | 101

________________________________________________________________________________________________


Page No | 102

________________________________________________________________________________________________


Page No | 103

________________________________________________________________________________________________


Page No | 104

________________________________________________________________________________________________


Page No | 105

________________________________________________________________________________________________


Page No | 106

________________________________________________________________________________________________


Page No | 107

________________________________________________________________________________________________


Page No | 108

________________________________________________________________________________________________


Page No | 109

________________________________________________________________________________________________


Page No | 110

Which two staterets egadig the ASA VPN coguaos ae coect? (Choose two) A. The ASA has a cecate issued by a exteal Cecate Authoity associated to the

________________________________________________________________________________________________


Page No | 111

ASDM_TustPoit1. B. The DefaultWEBVPNGoup Coeco Pole is usig the AAA with RADIUS seve rethod. C. The Iside-SRV bookrak efeeces thehps://192.168.1.2URL D. Oly Clietless SSL VPN access is allowed with the Sales goup policy E. AyCoect, IPSec IKEv1, ad IPSec IKEv2 VPN access is eabled o the outside iteface F. The Iside-SRV bookrak has ot bee applied to the Sales goup policy

Aoswern B,C Explaao: Fo B:

Fo C, Navigate to the Bookraks tab:

The hit “edit” ad you will see this:

________________________________________________________________________________________________


Page No | 112

Not A, as this is listed ude the Idety Cecates, ot the CA cecates:

Note E:

________________________________________________________________________________________________


Page No | 113


________________________________________________________________________________________________


Page No | 114

________________________________________________________________________________________________


Page No | 115

________________________________________________________________________________________________


Page No | 116

________________________________________________________________________________________________


Page No | 117

________________________________________________________________________________________________


Page No | 118

________________________________________________________________________________________________


Page No | 119

________________________________________________________________________________________________


Page No | 120

________________________________________________________________________________________________


Page No | 121

________________________________________________________________________________________________


Page No | 122

________________________________________________________________________________________________


Page No | 123

________________________________________________________________________________________________


Page No | 124

________________________________________________________________________________________________


Page No | 125

________________________________________________________________________________________________


Page No | 126

________________________________________________________________________________________________


Page No | 127

________________________________________________________________________________________________


Page No | 128

________________________________________________________________________________________________


Page No | 129

________________________________________________________________________________________________


Page No | 130

________________________________________________________________________________________________


Page No | 131

________________________________________________________________________________________________


Page No | 132

________________________________________________________________________________________________


Page No | 133

________________________________________________________________________________________________


Page No | 134

________________________________________________________________________________________________


Page No | 135

________________________________________________________________________________________________


Page No | 136

________________________________________________________________________________________________


Page No | 137

________________________________________________________________________________________________


Page No | 138

________________________________________________________________________________________________


Page No | 139

________________________________________________________________________________________________


Page No | 140

________________________________________________________________________________________________


Page No | 141

________________________________________________________________________________________________


Page No | 142

________________________________________________________________________________________________


Page No | 143

Whe uses logi to the Clietless SSLVPN usig hps://209.165.201.2/test, which goup policy will be applied?

________________________________________________________________________________________________


Page No | 144

A. test B. clietless C. Sales D. DtGpPolicy E. DefaultRAGoup F. DefaultWEBVPNGoup

Aoswern C Explaao: Fist avigate to the Coeco Poles tab as show below, highlight the oe with the test alias:

The hit the “edit” buo ad you ca clealy see the Sales Goup Policy beig applied.

________________________________________________________________________________________________


Page No | 145

Queson 67 SIMULATION Sceaio Give the ew addioal coecvity equierets ad the topology diagar, use ASDM to accorplish the equied ASA coguaos to reet the equierets. New addioal coecvity equierets: Oce the coect ASA coguaos have bee cogued: To access ASDM, click the ASA ico i the topology diagar. To access the Fiefox Bowse o the Outside PC, click the Outside PC ico i the topology diagar. To access the Corrad porpt o the Iside PC, click the Iside PC ico i the topology diagar. Note: Ae you rake the coguao chages i ASDM, ererbe to click Apply to apply the coguao chages. Not all ASDM scees ae eabled i this sirulao, if sore scee is ot eabled, ty to use dieet rethods to cogue the ASA to reet the equierets. I this sirulao, sore of the ASDM scees ray ot look ad fuco exactly like the eal ASDM.

________________________________________________________________________________________________


Page No | 146

________________________________________________________________________________________________


Page No | 147

________________________________________________________________________________________________


Page No | 148

________________________________________________________________________________________________


Page No | 149

________________________________________________________________________________________________


Page No | 150

________________________________________________________________________________________________


Page No | 151

________________________________________________________________________________________________


Page No | 152

________________________________________________________________________________________________


Page No | 153

________________________________________________________________________________________________


Page No | 154

________________________________________________________________________________________________


Page No | 155

________________________________________________________________________________________________


Page No | 156

________________________________________________________________________________________________


Page No | 157

________________________________________________________________________________________________


Page No | 158

________________________________________________________________________________________________


Page No | 159

________________________________________________________________________________________________


Page No | 160

________________________________________________________________________________________________


Page No | 161

________________________________________________________________________________________________


Page No | 162

________________________________________________________________________________________________


Page No | 163

________________________________________________________________________________________________


Page No | 164

________________________________________________________________________________________________


Page No | 165

________________________________________________________________________________________________


Page No | 166

________________________________________________________________________________________________


Page No | 167

________________________________________________________________________________________________


Page No | 168

________________________________________________________________________________________________


Page No | 169

________________________________________________________________________________________________


Page No | 170

________________________________________________________________________________________________


Page No | 171

________________________________________________________________________________________________


Page No | 172

________________________________________________________________________________________________


Page No | 173

________________________________________________________________________________________________


Page No | 174

________________________________________________________________________________________________


Page No | 175

________________________________________________________________________________________________


Page No | 176

________________________________________________________________________________________________


Page No | 177

________________________________________________________________________________________________


Page No | 178

________________________________________________________________________________________________


Page No | 179

________________________________________________________________________________________________


Page No | 180

________________________________________________________________________________________________


Page No | 181

________________________________________________________________________________________________


Page No | 182

________________________________________________________________________________________________


Page No | 183

Aoswern Fllw the explaoao part t get aoswer o this

________________________________________________________________________________________________


Page No | 184

sim queso Explaao: Fist, fo the HTTP access we eed to ceat a NAT object. Hee I called it HTTP but it ca be give ay are.

The, ceate the ewall ules to allow the HTTP access:

________________________________________________________________________________________________


Page No | 185

You ca veify usig the outside PC to HTTP ito 209.165.201.30. Fo step two, to be able to pig hosts o the outside, we edit the last sevice policy show below:

Ad the check the ICMP box oly as show below, the hit Apply.

________________________________________________________________________________________________


Page No | 186

Ae that is doe, we ca pigwww.cisco.coragai to veify:

________________________________________________________________________________________________


Page No | 187

Queson 68 What featues ca potect the data plae? (Choose thee.) A. policig B. ACLs C. IPS D. aspoog E. QoS F. DHCP-soopig

Aoswern B,D,F Queson 69 How ray cypto rap sets ca you apply to a oute iteface? A. 3 B. 2 C. 4 D. 1

Aoswern D Queson 70 What is the tasio ode of STP states o a Laye 2 switch iteface? A. listeig, leaig, blockig, fowadig, disabled B. listeig, blockig, leaig, fowadig, disabled C. blockig, listeig, leaig, fowadig, disabled D. fowadig, listeig, leaig, blockig, disabled

Aoswern C Queson 71 Which seso rode ca dey aackes ilie? A. IPS B. fail-close C. IDS D. fail-ope

Aoswern A Queson 72 Which opos ae lteig opos used to display SDEE ressage types? (Choose two.)

________________________________________________________________________________________________


Page No | 188

A. stop B. oe C. eo D. all

Aoswern C,D Queson 73 Whe a corpay puts a secuity policy i place, what is the eect o the corpay’s busiess? A. Miirizig isk B. Miirizig total cost of oweship C. Miirizig liability D. Maxirizig corpliace

Aoswern A Queson 74 Which wildcad rask is associated with a subet rask of /27? A. 0.0.0.31 B. 0.0.027 C. 0.0.0.224 D. 0.0.0.255

Aoswern A Queson 75 Which staterets about eexive access lists ae tue? (Choose thee.) A. Reexive access lists ceate a peraet ACE B. Reexive access lists appoxirate sessio lteig usig the established keywod C. Reexive access lists ca be aached to stadad ared IP ACLs D. Reexive access lists suppot UDP sessios E. Reexive access lists ca be aached to exteded ared IP ACLs F. Reexive access lists suppot TCP sessios

Aoswern D,E,F Queson 76 Which acos ca a poriscuous IPS take to rigate a aack? (Choose thee.) A. Modifyig packets B. Requesg coeco blockig

________________________________________________________________________________________________


Page No | 189

C. Deyig packets D. Reseg the TCP coeco E. Requesg host blockig F. Deyig fares

Aoswern B,D,E Queson 77 Which corrad will cogue a Cisco ASA ewall to authecate uses whe they ete the eable sytax usig the local database with o fallback rethod? A. aaa authecao eable cosole LOCAL SERVER_GROUP B. aaa authecao eable cosole SERVER_GROUP LOCAL C. aaa authecao eable cosole local D. aaa authecao eable cosole LOCAL

Aoswern D Queson 78 Which Cisco Secuity Maage applicao collects iforao about device status ad uses it to geeate ocaos ad alets? A. FlexCog B. Device Maage C. Repot Maage D. Health ad Peforace Moito

Aoswern D Queson 79 Which accoug oces ae used to sed a failed authecao aerpt ecod to a AAA seve? (Choose two.) A. stat-stop B. stop-ecod C. stop-oly D. stop

Aoswern A,C Queson 80 Which corrad is eeded to eable SSH suppot o a Cisco Route? A. cypto key lock sa B. cypto key geeate sa

________________________________________________________________________________________________


Page No | 190

C. cypto key zeoize sa D. cypto key ulock sa

Aoswern B Queson 81 Which potocol povides secuity to Secue Copy? A. IPsec B. SSH C. HTTPS D. ESP

Aoswern B Queson 82 A clietless SSL VPN use who is coecg o a Widows Vista corpute is rissig the reu opo fo Rerote Desktop Potocol o the potal web page. Which aco should you take to begi toubleshoog? A. Esue that the RDP2 plug-i is istalled o the VPN gateway B. Reboot the VPN gateway C. Istuct the use to ecoect to the VPN gateway D. Esue that the RDP plug-i is istalled o the VPN gateway

Aoswern D Queson 83 Which secuity zoe is autoracally deed by the syster? A. The souce zoe B. The self zoe C. The desao zoe D. The iside zoe

Aoswern B Queson 84 What ae puposes of the Iteet Key Exchage i a IPsec VPN? (Choose two.) A. The Iteet Key Exchage potocol establishes secuity associaos B. The Iteet Key Exchage potocol povides data codeality C. The Iteet Key Exchage potocol povides eplay deteco D. The Iteet Key Exchage potocol is esposible fo rutual authecao

________________________________________________________________________________________________


Page No | 191

Aoswern A,D Queson 85 Which addess block is eseved fo locally assiged uique local addesses? A. 2002::/16 B. FD00::/8 C. 2001::/32 D. FB00::/8

Aoswern B Queson 86 What is a possible easo fo the eo ressage?Route(cog)aaa seve?% Uecogized corrad A. The corrad sytax equies a space ae the wod “seve” B. The corrad is ivalid o the taget device C. The oute is aleady uig the latest opeag syster D. The oute is a ew device o which the aaa ew-rodel corrad rust be applied befoe couig

Aoswern D Queson 87 Which staterets about srat tuels o a Cisco ewall ae tue? (Choose two.) A. Srat tuels ca be used by cliets that do ot have adriistato pivileges B. Srat tuels suppot all opeag systers C. Srat tuels oe bee peforace tha pot fowadig D. Srat tuels equie the cliet to have the applicao istalled locally

Aoswern A,C Queson 88 If the ave VLAN o a tuk is dieet o each ed of the lik, what is a poteal cosequece? A. The iteface o both switches ray shut dow B. STP loops ray occu C. The switch with the highe ave VLAN ray shut dow D. The iteface with the lowe ave VLAN ray shut dow

Aoswern B

________________________________________________________________________________________________


Page No | 192

Queson 89 Which opo descibes iforao that rust be cosideed whe you apply a access list to a physical iteface? A. Potocol used fo lteig B. Dieco of the access class C. Dieco of the access goup D. Dieco of the access list

Aoswern C Queson 90 Which souce pot does IKE use whe NAT has bee detected betwee two VPN gateways? A. TCP 4500 B. TCP 500 C. UDP 4500 D. UDP 500

Aoswern C Queson 91 Which of the followig ae featues of IPsec taspot rode? (Choose thee.) A. IPsec taspot rode is used betwee ed staos B. IPsec taspot rode is used betwee gateways C. IPsec taspot rode suppots rulcast D. IPsec taspot rode suppots uicast E. IPsec taspot rode ecypts oly the payload F. IPsec taspot rode ecypts the ee packet

Aoswern A,D,E Queson 92 Which corrad causes a Laye 2 switch iteface to opeate as a Laye 3 iteface? A. o switchpot oegoate B. switchpot C. o switchpot rode dyaric auto D. o switchpot

Aoswern D Queson 93

________________________________________________________________________________________________


Page No | 193

Which TACACS+ seve-authecao potocols ae suppoted o Cisco ASA ewalls? (Choose thee.) A. EAP B. ASCII C. PAP D. PEAP E. MS-CHAPv1 F. MS-CHAPv2

Aoswern B,C,E Queson 94 Which type of IPS ca idefy wors that ae popagag i a etwok? A. Policy-based IPS B. Aoraly-based IPS C. Reputao-based IPS D. Sigatue-based IPS

Aoswern B Queson 95 Which corrad veies phase 1 of a IPsec VPN o a Cisco oute? A. show cypto rap B. show cypto ipsec sa C. show cypto isakrp sa D. show cypto egie coeco acve

Aoswern C Queson 96 What is the pupose of a hoeypot IPS? A. To ceate custorized policies B. To detect ukow aacks C. To oralize stears D. To collect iforao about aacks

Aoswern D Queson 97 Which type of ewall ca act o the behalf of the ed device?

________________________________________________________________________________________________


Page No | 194

A. Stateful packet B. Applicao C. Packet D. Poxy

Aoswern D Queson 98 Which syslog seveity level is level urbe 7? A. Waig B. Iforaoal C. Nocao D. Debuggig

Aoswern D Queson 99 By which kid of theat is the vicr ticked ito eteig useare ad passwod iforao at a disguised website? A. Spoog B. Malwae C. Spar D. Phishig

Aoswern D Queson 100 Which type of rioig does SPAN techology pefor? A. Rerote rioig ove Laye 2 B. Rerote rioig ove Laye 3 C. Local rioig ove Laye 2 D. Local rioig ove Laye 3

Aoswern C Queson 101 Which tasks is the sessio raageret path esposible fo? (Choose thee.) A. Veifyig IP checksurs B. Peforig oute lookup C. Peforig sessio lookup

________________________________________________________________________________________________


Page No | 195

D. Allocag NAT taslaos E. Checkig TCP sequece urbes F. Checkig packets agaist the access list

Aoswern B,D,F Queson 102 Which etwok device does NTP authecate? A. Oly the re souce B. Oly the cliet device C. The ewall ad the cliet device D. The cliet device ad the re souce

Aoswern A Queson 103 Which Cisco poduct ca help rigate web-based aacks withi a etwok? A. Adapve Secuity Appliace B. Web Secuity Appliace C. Erail Secuity Appliace D. Idety Sevices Egie

Aoswern B Queson 104 Which stateret coectly descibes the fuco of a pivate VLAN? A. A pivate VLAN paos the Laye 2 boadcast dorai of a VLAN ito subdorais B. A pivate VLAN paos the Laye 3 boadcast dorai of a VLAN ito subdorais C. A pivate VLAN eables the ceao of rulple VLANs usig oe boadcast dorai D. A pivate VLAN corbies the Laye 2 boadcast dorais of ray VLANs ito oe rajo boadcast dorai

Aoswern A Queson 105 What hash type does Cisco use to validate the itegity of dowloaded irages? A. Sha1 B. Sha2 C. Md5 D. Md1

________________________________________________________________________________________________


Page No | 196

Aoswern C Queson 106 Which Cisco featue ca help rigate spoog aacks by veifyig syrrety of the tac path? A. Uidiecoal Lik Deteco B. Uicast Revese Path Fowadig C. TustSec D. IP Souce Guad

Aoswern B Queson 107 What is the rost corro Cisco Discovey Potocol vesio 1 aack? A. Deial of Sevice B. MAC-addess spoog C. CAM-table oveow D. VLAN hoppig

Aoswern A Queson 108 What is the Cisco pefeed coutereasue to rigate CAM oveows? A. Pot secuity B. Dyaric pot secuity C. IP souce guad D. Root guad

Aoswern B Queson 109 Which opo is the rost eecve placeret of a IPS device withi the ifastuctue? A. Ilie, behid the iteet oute ad ewall B. Ilie, befoe the iteet oute ad ewall C. Poriscuously, ae the Iteet oute ad befoe the ewall D. Poriscuously, befoe the Iteet oute ad the ewall


________________________________________________________________________________________________


Page No | 197

If a oute coguao icludes the lie aaa authecao logi default goup tacacs+ eable, which evets will occu whe the TACACS+ seve etus a eo? (Choose two.) A. The use will be porpted to authecate usig the eable passwod B. Authecao aerpts to the oute will be deied C. Authecao will use the oute`s local database D. Authecao aerpts will be set to the TACACS+ seve

Aoswern A,B Queson 111 Which alet potocol is used with Cisco IPS Maage Expess to suppot up to 10 sesos? A. SDEE B. Syslog C. SNMP D. CSM

Aoswern A Queson 112 Whe a switch has rulple liks coected to a dowstear switch, what is the st step that STP takes to pevet loops? A. STP elects the oot bidge B. STP selects the oot pot C. STP selects the desigated pot D. STP blocks oe of the pots

Aoswern A Queson 113 Which type of addess taslao should be used whe a Cisco ASA is i taspaet rode? A. Stac NAT B. Dyaric NAT C. Oveload D. Dyaric PAT

Aoswern A Queson 114 Which Which corpo corpoet etss does does HMAC use to deter deterie ie the authe autheci city ty ad itegi itegity ty of a ressage ressage? ? (Choose two.)

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 198

A. The passwod B. The hash C. The key D. The tasfor set

Aoswern B,C Queson 115 What is the default reout iteval duig which a oute waits fo esposes for a TACACS seve befoe declaig a reout failue? A. 5 secods B. 10 secods C. 15 secods D. 20 secods

Aoswern A Queson 116 Which RADIUS seve authecao potocols ae suppoted o Cisco ASA ewalls? (Choose thee.) A. EAP B. ASCII C. PAP D. PEAP E. MS-CHAPv1 MS-CHAPv1 F. MS-CHAPv2 MS-CHA Pv2

Aoswern C,E,F Queson 117 Which corrad iializes a lawful itecept view? A. useare cisco1 view lawful-itecept passwod cisco B. pase view cisco li-view C. li-view cisco use cisco1 passwod cisco D. pase view li-view iclusive

Aoswern C Queson 118 Which coutereasues ca rigate ARP spoog aacks? (Choose two.) A. Pot secuity B. DHCP soopig

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 199

C. IP souce guad D. Dyaric ARP ispeco

Aoswern B,D Queson 119 Which of the followig staterets about access lists ae tue? (Choose thee.) A. Exteded access lists should be placed as ea as possible to the desao B. Exteded access lists should be placed as ea as possible to the souce C. Stadad access lists should be placed as ea as possible to the desao D. Stadad access lists should be placed as ea as possible to the souce E. Stadad access lists lte o the souce addess F. Stadad access lists lte o the desao addess

Aoswern B,C,E Queson 120 Which stateret about exteded access lists is tue? A. Exteded access lists pefor lteig that is based o souce ad desao ad ae rost eecve whe applied to the desao B. Exteded access lists pefor lteig that is based o souce ad desao ad ae rost eecve whe applied to the souce C. Exteded access lists pefor lteig that is based o desao ad ae rost eecve whe applied to the souce D. Exteded access lists pefor lteig that is based o souce ad ae rost eecve whe applied to the desao

Aoswern B Queson 121 Which secuity reasues ca potect the cotol plae of a Cisco oute? (Choose two.) A. CCP B. Pase views C. Access cotol lists D. Pot secuity E. CoPP

Aoswern A,E Queson 122 I which stage of a aack does the aacke discove devices o a taget etwok?

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 200

A. Recoaissace B. Coveig tacks C. Gaiig access D. Maitaiig access

Aoswern A Queson 123 Which potocols potocols use ecypo to potect potect the codeality codeality of data tasried tasried betwee two paes? (Choose two.) A. FTP B. SSH C. Telet D. AAA E. HTTPS F. HTTP

Aoswern B,E Queson 124 What ae the piray aack rethods of VLAN hoppig? (Choose two.) A. VoIP hoppig B. Switch spoog C. CAM-table oveow D. Double taggig

Aoswern B,D Queson 125 How ca the adriistato eable peraet cliet istallao i a Cisco AyCoect VPN ewall coguao? A. Issue the corrad aycoect keep-istalle ude the goup policy o useare webvp rode B. Issue the corrad aycoect keep-istalle istalled i the global coguao C. Issue Issue the corra corrad d ayc ayco oect ect keepkeep-is ista talle lle ista istalled lled ude ude the goup goup policy policy o usea useare re webvp rode D. Issue Issue the corra corrad d ayc ayco oect ect keepkeep-is ista talle lle ista istalle lle ude ude the goup goup policy policy o usea useare re webvp rode

Aoswern C Queson 126 Which type of secuity cotol is defese i depth?

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 201

A. Theat rigao B. Risk aalysis C. Botet rigao D. Ovet ad covet chaels

Aoswern A Queson 127 O which Cisco Coguao Pofessioal scee do you eable AAA A. AAA Surray B. AAA Seves ad Goups C. Authecao Policies D. Authoizao Policies

Aoswern A Queson 128 What ae two uses of SIEM sowae? (Choose two.) A. collecg ad achivig syslog data B. aleg adriistatos to secuity evets i eal re C. peforig autorac etwok audits D. coguig ewall ad IDS devices E. scaig erail fo suspicious aachrets

Aoswern A,B Queson 129 What ae the thee layes of a hieachical etwok desig? (Choose thee.) A. access B. coe C. distibuo D. use E. seve F. Iteet

Aoswern A,B,C Queson 130 I which two situaos should you use i-bad raageret? (Choose two.) A. whe raageret applicaos eed cocuet access to the device

________________________________________________________________________________________________


Page No | 202

B. whe you equie adriistato access for rulple locaos C. whe a etwok device fails to fowad packets D. whe you equie ROMMON access E. whe the cotol plae fails to espod

Aoswern A,B Queson 131 What ae two ways to pevet eavesdoppig whe you pefor device-raageret tasks? (Choose two.) A. Use a SSH coeco. B. Use SNMPv3. C. Use out-of-bad raageret. D. Use SNMPv2. E. Use i-bad raageret.

Aoswern A,B Queson 132 I which thee ways does the RADIUS potocol die for TACACS? (Choose thee.) A. RADIUS uses UDP to corruicate with the NAS. B. RADIUS ecypts oly the passwod eld i a authecao packet. C. RADIUS authecates ad authoizes sirultaeously, causig fewe packets to be tasried. D. RADIUS uses TCP to corruicate with the NAS. E. RADIUS ca ecypt the ee packet that is set to the NAS. F. RADIUS suppots pe-corrad authoizao.

Aoswern A,B,C Queson 133 Which thee ESP elds ca be ecypted duig tasrissio? (Choose thee.) A. Secuity Paarete Idex B. Sequece Nurbe C. MAC Addess D. Paddig E. Pad Legth F. Next Heade

Aoswern D,E,F Queson 134 Which two authecao types does OSPF suppot? (Choose two.)

________________________________________________________________________________________________


Page No | 203

A. plaitext B. MD5 C. HMAC D. AES 256 E. SHA-1 F. DES

Aoswern A,B Queson 135 Which two featues ae corroly used CoPP ad CPP to potect the cotol plae? (Choose two.) A. QoS B. tac classicao C. access lists D. policy raps E. class raps F. Cisco Expess Fowadig

Aoswern A,B Queson 136 Which thee staterets descibe DHCP spoog aacks? (Choose thee.) A. They ca rodify tac i tasit. B. They ae used to pefor ra-i-the-riddle aacks. C. They use ARP poisoig. D. They ca access rost etwok devices. E. They potect the idety of the aacke by raskig the DHCP addess. F. They ae ca physically rodify the etwok gateway.

Aoswern A,B,C Queson 137 Which thee staterets about Cisco host-based IPS soluos ae tue? (Choose thee.) A. It ca view ecypted les. B. It ca have roe esticve policies tha etwok-based IPS. C. It ca geeate alets based o behavio at the desktop level. D. It ca be deployed at the peirete. E. It uses sigatue-based policies. F. It woks with deployed ewalls.

Aoswern A,B,C

________________________________________________________________________________________________


Page No | 204

Queson 138 A data beach has occued ad you corpay database has bee copied. Which secuity piciple has bee violated? A. codeality B. availability C. access D. cotol

Aoswern A Queson 139 I which type of aack does a aacke sed erail ressages that ask the ecipiet to click a lik such as hps://www.cisco.et.cc/secuelogo? A. phishig B. pharig C. solicitao D. secue tasaco

Aoswern A Queson 140 You secuity tear has discoveed a ralicious pogar that has bee havesg the CEO's erail ressages ad the corpay's use database fo the last 6 roths. What type of aack did you tear discove? A. advaced pesistet theat B. tageted ralwae C. dive-by spywae D. social acvisr

Aoswern A Queson 141 Which stateret povides the best deio of ralwae? A. Malwae is uwated sowae that is harful o destucve. B. Malwae is sowae used by ao states to corrit cybe cires. C. Malwae is a colleco of wors, viuses, ad Toja hoses that is distibuted as a sigle package. D. Malwae is tools ad applicaos that erove uwated pogars.

Aoswern A

________________________________________________________________________________________________


Page No | 205

Queson 142 What rechaisr does asyrretic cyptogaphy use to secue data? A. a public/pivate key pai B. shaed secet keys C. a RSA oce D. a MD5 hash


With which NTP seve has the oute sychoized? A. 192.168.10.7 B. 108.61.73.243 C. 209.114.111.1 D. 132.163.4.103 E. 204.2.134.164 F. 241.199.164.101


________________________________________________________________________________________________


Page No | 206

Which stateret about the give coguao is tue? A. The sigle-coeco corrad causes the device to establish oe coeco fo all TACACS tasacos. B. The sigle-coeco corrad causes the device to pocess oe TACACS equest ad the rove to the ext seve. C. The reout corrad causes the device to rove to the ext seve ae 20 secods of TACACS iacvity. D. The oute corruicates with the NAS o the default pot, TCP 1645.

Aoswern A Queson 145 What is the best way to cor that AAA authecao is wokig popely? A. Use the test aaa corrad. B. Pig the NAS to cor coecvity. C. Use the Cisco-ecorreded coguao fo AAA authecao. D. Log ito ad out of the oute, ad the check the NAS authecao log.

Aoswern A Queson 146 How does PEAP potect the EAP exchage? A. It ecypts the exchage usig the seve cecate. B. It ecypts the exchage usig the cliet cecate. C. It validates the seve-supplied cecate, ad the ecypts the exchage usig the cliet cecate. D. It validates the cliet-supplied cecate, ad the ecypts the exchage usig the seve

________________________________________________________________________________________________


Page No | 207

cecate.

Aoswern A Queson 147 What irpoveret does EAP-FASTv2 povide ove EAP-FAST? A. It allows rulple cedeals to be passed i a sigle EAP exchage. B. It suppots roe secue ecypo potocols. C. It allows faste authecao by usig fewe packets. D. It addesses secuity vuleabilies foud i the oigial potocol.

Aoswern A Queson 148 How does a device device o a etwo etwok k usig usig ISE eceiv eceive e its digital digital cec cecate ate duig duig the ew-devic ew-device e egistao pocess? A. ISE acts as a SCEP poxy to eable the device to eceive a cecate for a cetal CA seve. B. ISE issues a cecate for its iteal CA seve. C. ISE issues a pe-deed cecate for a local database. D. The device equests a ew cecate diectly for a cetal CA.

Aoswern A Queson 149 Whe a adriistato iiates a device wipe corrad for the ISE, what is the irrediate eect? A. It eque equest stss the the adriis adriist tato ato to choose choose betwee betwee  easi easig g all device device data data o oly raaged raaged copoate data. B. It equests the adriistato to ete the device PIN o passwod befoe poceedig with the opeao. C. It oes the device use ad poceeds with the ease opeao. D. It irrediately eases all data o the device.

Aoswern A Queson 150 What coguao coguao allows AyCoect AyCoect to autoracally autoracally establish establish a VPN sessio whe a use logs i to the corpute? A. always-o B. poxy C. taspaet rode D. Tusted Tusted Netwok N etwok Deteco

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 208

Aoswern A Queson 151 What secuity featue allows a pivate IP addess to access the Iteet by taslag it to a public addess? A. NAT B. haipiig C. Tusted Netwok Deteco D. Cecao Authoity


You have cogued R1 ad R2 as show, but the outes ae uable to establish a site-to-site VPN tuel. What aco ca you take to coect the pobler? A. Edit the cypto keys o R1 ad R2 to ratch. B. Edit the ISAKMP policy sequece urbes o R1 ad R2 to ratch. C. Set a valid value fo the cypto key lifere o each oute. D. Edit the cypto isakrp key corrad o each oute with the addess value of its ow iteface.

Aoswern A

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 209

Queson 153 Refe to the exhibit.

What is the eect of the give corrad? A. It reges authecao ad ecypo rethods to potect tac that ratches a ACL. B. It cogues the etwok to use a dieet tasfor set betwee pees. C. It cogues ecypo fo MD5 HMAC. D. It cogues authecao as AES 256.


While toubleshoog site-to-site VPN, you issued the show cypto isakrp sa corrad. What does the give output show? A. IPSec Phase 1 is established betwee 10.10.10.2 ad 10.1.1.5. B. IPSec Phase 2 is established betwee 10.10.10.2 ad 10.1.1.5. C. IPSec Phase 1 is dow due to a QM_IDLE state. D. IPSec Phase 2 is dow due to a QM_IDLE state.


While toubleshoog site-to-site VPN, you issued the show cypto isakrp sa corrad. What does the give output show? A. IKE Phase 1 rai rode was ceated o 10.1.1.5, but it failed to egoate with 10.10.10.2. B. IKE Phase 1 rai rode has successfully egoated betwee 10.1.1.5 ad 10.10.10.2. C. IKE Phase 1 aggessive rode was ceated o 10.1.1.5, but it failed to egoate with 10.10.10.2. D. IKE Phase 1 aggessive rode has successfully egoated betwee 10.1.1.5 ad 10.10.10.2.

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 210

Aoswern A Queson 156 Which stateret about IOS pivilege levels is tue? A. Each pivilege level suppots the corrads at its ow level ad all levels below it. B. Each pivilege level suppots the corrads at its ow level ad all levels above it. C. Pivilege-level corrads ae set explicitly fo each use. D. Each pivilege level is idepedet of all othe pivilege levels.


The Adri use is uable to ete coguao rode o a device with the give coguao. What chage ca you rake to the coguao to coect the pobler? A. Rerove the autocorrad keywod ad agurets for the useare adri pivilege lie. B. Chage the Pivilege exec level value to 15. C. Rerove the two Useare Adri lies. D. Rerove the Pivilege exec lie.


Which Which lie lie i this this co cogu gua ao o  pev peve ets ts the the HelpD HelpDes esk k use use for for rodif rodifyi yig g the the ite itefa face ce coguao?

_____________________ __________ ______________________ ______________________ ______________________ ______________________ ______________________ ______________________ ____________________ _________


Page No | 211

A. Pivilege exec level 9 cogue terial B. Pivilege exec level 10 iteface C. Useare HelpDesk pivilege 6 passwod help D. Pivilege exec level 7 show stat-up

Aoswern A Queson 159 I the oute ospf 200 corrad, what does the value 200 stad fo? A. pocess ID B. aea ID C. adriistave distace value D. ABR ID

Aoswern A Queson 160 Which featue ltes CoPP packets? A. access cotol lists B. class raps C. policy raps D. oute raps

Aoswern A Queson 161 I which type of aack does the aacke aerpt to oveload the CAM table o a switch so that the switch acts as a hub? A. MAC spoog B. gatuitous ARP C. MAC oodig D. DoS

Aoswern C Queson 162 Which type of PVLAN pot allows hosts i the sare VLAN to corruicate diectly with each othe? A. corruity fo hosts i the PVLAN B. poriscuous fo hosts i the PVLAN C. isolated fo hosts i the PVLAN

________________________________________________________________________________________________


Page No | 212

D. spa fo hosts i the PVLAN

Aoswern A Queson 163 What is a poteal dawback to leavig VLAN 1 as the ave VLAN? A. It ray be suscepble to a VLAN hopig aack. B. Gatuitous ARPs right be able to coduct a ra-i-the-riddle aack. C. The CAM right be oveloaded, eecvely tuig the switch ito a hub. D. VLAN 1 right be vuleable to IP addess spoog.

Aoswern A Queson 164 I which thee cases does the ASA ewall perit iboud HTTP GET equests duig oral opeaos? (Choose thee). A. whe ratchig NAT eties ae cogued B. whe ratchig ACL eties ae cogued C. whe the ewall eceives a SYN-ACK packet D. whe the ewall eceives a SYN packet E. whe the ewall equies HTTP ispeco F. whe the ewall equies stict HTTP ispeco

Aoswern A,B,D Queson 165 Which ewall coguao rust you pefor to allow tac to ow i both diecos betwee two zoes? A. You rust cogue two zoe pais, oe fo each dieco. B. You ca cogue a sigle zoe pai that allows bidiecoal tac ows fo ay zoe. C. You ca cogue a sigle zoe pai that allows bidiecoal tac ows fo ay zoe except the self zoe. D. You ca cogue a sigle zoe pai that allows bidiecoal tac ows oly if the souce zoe is the less secue zoe.

Aoswern A Queson 166 What is a valid irplicit perit ule fo tac that is tavesig the ASA ewall? A. ARPs i both diecos ae peried i taspaet rode oly. B. Uicast IPv4 tac for a highe secuity iteface to a lowe secuity iteface is peried i

________________________________________________________________________________________________


Page No | 213

outed rode oly. C. Uicast IPv6 tac for a highe secuity iteface to a lowe secuity iteface is peried i taspaet rode oly. D. Oly BPDUs for a highe secuity iteface to a lowe secuity iteface ae peried i taspaet rode. E. Oly BPDUs for a highe secuity iteface to a lowe secuity iteface ae peried i outed rode.

Aoswern A Queson 167 Which stateret about the corruicao betwee itefaces o the sare secuity level is tue? A. Itefaces o the sare secuity level equie addioal coguao to perit ite-iteface corruicao. B. Coguig itefaces o the sare secuity level ca cause asyrretic oug. C. All tac is allowed by default betwee itefaces o the sare secuity level. D. You ca cogue oly oe iteface o a idividual secuity level.

Aoswern A Queson 168 Which IPS rode povides the raxirur urbe of acos? A. ilie B. poriscuous C. spa D. failove E. bypass

Aoswern A Queson 169 How ca you detect a false egave o a IPS? A. View the alet o the IPS. B. Review the IPS log. C. Review the IPS cosole. D. Use a thid-paty syster to pefor peetao tesg. E. Use a thid-paty to audit the ext-geeao ewall ules.

Aoswern D Queson 170 What is the piray pupose of a deed ule i a IPS?

________________________________________________________________________________________________


Page No | 214

A. to cogue a evet aco that takes place whe a sigatue is tiggeed B. to dee a set of acos that occu whe a specic use logs i to the syster C. to cogue a evet aco that is pe-deed by the syster adriistato D. to detect iteal aacks

Aoswern A Queson 171 Which Soucee evet aco should you choose if you wat to block oly ralicious tac for a pacula ed use? A. Allow with ispeco B. Allow without ispeco C. Block D. Tust E. Moito

Aoswern A Queson 172 How ca FiePOWER block ralicious erail aachrets? A. It fowads erail equests to a exteal sigatue egie. B. It scas iboud erail ressages fo kow bad URLs. C. It seds the tac though a le policy. D. It seds a alet to the adriistato to veify suspicious erail ressages.

Aoswern C Queson 173 You have bee tasked with blockig use access to websites that violate corpay policy, but the sites use dyaric IP addesses. What is the best pacce fo URL lteig to solve the pobler? A. Eable URL lteig ad use URL categoizao to block the websites that violate corpay policy. B. Eable URL lteig ad ceate a blacklist to block the websites that violate corpay policy. C. Eable URL lteig ad ceate a whitelist to block the websites that violate corpay policy. D. Eable URL lteig ad use URL categoizao to allow oly the websites that corpay policy allows uses to access. E. Eable URL lteig ad ceate a whitelist to allow oly the websites that corpay policy allows uses to access.


________________________________________________________________________________________________


Page No | 215

Which techology ca be used to ate data delity ad to povide a authecated hash fo data? A. le eputao B. le aalysis C. sigatue updates D. etwok blockig

Aoswern A Queson 175 Which type of ecypo techology has the boadest plaor suppot to potect opeag systers? A. sowae B. hadwae C. riddlewae D. le-level

Aoswern A Queson 176 A poxy ewall potects agaist which type of aack? A. coss-site scipg aack B. wor tac C. pot scaig D. DDoS aacks

Aoswern A Queson 177 What is a beet of a web applicao ewall? A. It blocks kow vuleabilies without patchig applicaos. B. It sirplies toubleshoog. C. It acceleates web tac. D. It suppots all etwokig potocols.

Aoswern A Queson 178 Which featue of the Cisco Erail Secuity Appliace ca rigate the irpact of sowshoe spar ad sophiscated phishig aacks? A. cotextual aalysis

________________________________________________________________________________________________


Page No | 216

B. holisc udestadig of theats C. gayrail raageret ad lteig D. sigatue-based IPS

Aoswern A Queson 179 What do you use whe you have a etwok object o goup ad wat to use a IP addess? A. Stac NAT B. Dyaric NAT C. idety NAT D. Stac PAT

Aoswern B Queson 180 Which thee staterets ae chaacteiscs of DHCP Spoog? (choose thee) A. Ap Poisoig B. Modify Tac i tasit C. Used to pefor ra-i-the-riddle aack D. Physically rodify the etwok gateway E. Potect the idety of the aacke by raskig the DHCP addess F. ca access rost etwok devices

Aoswern ABC Queson 181 which featue allow for dyaric NAT pool to choose ext IP addess ad ot a pot o a used IP addess? A. ext IP B. oud obi C. Dyaric otao D. Dyaric PAT otao

Aoswern B Queson 182 Which NAT opo is executed st duig i case of rulple at taslaos? A. dyaric at with shotest pex B. dyaric at with logest pex C. stac at with shotest pex

________________________________________________________________________________________________


Page No | 217

D. stac at with logest pex

Aoswern D Queson 183 If a switch pot goes diectly ito a blocked state oly whe a supeio BPDU is eceived, what rechaisr rust be i use? A. STP BPDU guad B. loop guad C. STP Root guad D. EtheChael guad


What ae two eects of the give corrad? (Choose two.) A. It cogues authecao to use AES 256. B. It cogues authecao to use MD5 HMAC. C. It cogues authoizao use AES 256. D. It cogues ecypo to use MD5 HMAC. E. It cogues ecypo to use AES 256.

Aoswern B,E Queson 185 Which featue allows a dyaric PAT pool to select the ext addess i the PAT pool istead of the ext pot of a exisg addess? A. ext IP B. oud obi C. dyaric otao D. NAT addess otao

Aoswern B Queson 186 Which NAT type allows oly objects o goups to efeece a IP addess?

________________________________________________________________________________________________


210-260

Recommend Documents