New Updated 210-260 Exam Questions from PassLeader 210-260 PDF dumps! Welcome to download the newest PassLeader 210-260 VCE dumps: https://www.passleader.com/210-260.html (488 Q&As)
Keywords: 210-260 exam dumps, 210-260 exam questions, 210-260 VCE dumps, 210-260 PDF dumps, 210-260 practice tests, 210-260 study guide, 210-260 braindumps, Implementing Cisco Network Security (IINS) Exam
P.S. New 210-260 IINS dumps PDF: https://drive.google.com/open?id=0B-ob6L_QjGLpM1dfWVNVZ3Z5dzg
NEW QUESTION 474
Which two actions can an end user take to manage a lost or stolen device in Cisco ISE? (Choose two.)
A. Reinstate a device that the user previously marked as lost or stolen.
B. Activate Cisco ISE Endpoint protection Services to quarantine the device.
C. Request revocation of the digital certificate of the device.
D. Add the MAC address of the device to a list of blacklisted devices.
E. Force the device to be locked with a PIN.
Answer: CD
NEW QUESTION 475
What are two default behaviors of the traffic on a zone based firewall? (Choose two.)
A. The CBAC rules that are configured on router interfaces apply to zone interfaces.
B. Communication is blocked between interfaces that are members of the same zone.
C. Traffic within the self zone uses an implicit deny all.
D. All traffic between zones is implicity blocked.
E. Communication is allowed between interfaces that are members of the same zone.
Answer: DE
NEW QUESTION 476
What is an advantage of split tunneling?
A. It allows users with a VPN connection to a corporate network to access the Internet by using the VPN for security.
B. It enables the VPN server to filter traffic more efficiently.
C. It allows users with a VPN connection to a corporate network to access the Internet without sending traffic across the corporate network.
D. It protects traffic on the private network from users on the public network.
Answer: C
NEW QUESTION 477
Which IDS/IPS state misidentifies acceptable behavior as an attack?
A. false positive
B. false negative
C. true positive
D. true negative
Answer: A
NEW QUESTION 478
Which type of social engineering attack targets top executives?
A. baiting
B. vishing
C. whaling
D. spear phishing
Answer: A
NEW QUESTION 479
Which type of firewall monitors and protects a specific system?
A. proxy firewall
B. stateless firewall
C. application firewall
D. personal firewall
Answer: D
NEW QUESTION 480
On an ASA, which maps are used to identify traffic?
A. Policy maps
B. Class maps
C. Route maps
D. Service maps
Answer: B
NEW QUESTION 481
Which two roles of the Cisco WSA are true? (Choose two.)
A. web proxy
B. URL filter
C. antispam
D. IPS
E. firewall
Answer: AB
NEW QUESTION 482
Which command do you enter to verify the Phase 1 status of a VPN connection?
A. debug crypto isakmp
B. sh crypto session
C. sh crypto isakmp sa
D. sh crypto ipsec sa
Answer: D
NEW QUESTION 483
Which command enables authentication at the OSPFv2 routing process level?
A. area 0 authentication message-digest
B. area 0 authentication ipsec spi 500 md5 1234567890ABCDEF1234567890ABCDEF
C. ip ospf authentication message-digest
D. ip ospf message-digest-key 1 md5 C1sc0!
Answer: A
NEW QUESTION 484
What is the maximum number of methods that a single method list can contain?
A. 4
B. 3
C. 2
D. 5
Answer: D
NEW QUESTION 485
Which IPS detection method examines network traffic for preconfigured patterns?
A. signature-based detection
B. policy-based detection
C. anomaly-based detection
D. honey-pot detection
Answer: A
NEW QUESTION 486
……
Download the newest PassLeader 210-260 dumps from passleader.com now! 100% Pass Guarantee!
210-260 PDF dumps & 210-260 VCE dumps: https://www.passleader.com/210-260.html (488 Q&As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!)
P.S. New 210-260 IINS dumps PDF: https://drive.google.com/open?id=0B-ob6L_QjGLpM1dfWVNVZ3Z5dzg