210-260 — Free Practice Questions
10 free sample questions from a bank of 129, with the correct answers and explanations. No signup required — start practising right now.
1Which two services define cloud networks? (Choose two.)
- Infrastructure as a Service
- Platform as a Service
- Security as a Service
- Compute as a Service
- Tenancy as a Service
Answer:
2Which two statements about stateless firewalls are true? (Choose two.)
- They compare the 5-tuple of each incoming packet against configurable rules.
- They cannot track connections.
- They are designed to work most efficiently with stateless protocols such as HTTP or HTTPS.
- Cisco IOS cannot implement them because the platform is stateful by nature.
- The Cisco ASA is implicitly stateless because it blocks all traffic by default.
Answer:
3What is the Cisco preferred countermeasure to mitigate CAM overflows?
- Port security
- Dynamic port security
- IP source guard
- Root guard
Answer: B
4Which three statements about host-based IPS are true? (Choose three.)
- It can view encrypted files.
- It can have more restrictive policies than network-based IPS.
- It can generate alerts based on behavior at the desktop level.
- It can be deployed at the perimeter.
- It uses signature-based policies.
- It works with deployed firewalls.
Answer:
5What three actions are limitations when running IPS in promiscuous mode? (Choose three.)
- deny attacker
- deny packet
- modify packet
- request block connection
- request block host
- reset TCP connection
Answer:
6Refer to the exhibit. What is the effect of the given command?
- It merges authentication and encryption methods to protect traffic that matches an ACL.
- It configures the network to use a different transform set between peers.
- It configures encryption for MD5 HMAC.
- It configures authentication as AES 256.
Answer: A
7How can FirePOWER block malicious email attachments?
- It forwards email requests to an external signature engine.
- It scans inbound email messages for known bad URLs.
- It sends the traffic through a file policy.
- It sends an alert to the administrator to verify suspicious email messages.
Answer: C
8Which type of secure connectivity does an extranet provide?
- other company networks to your company network
- remote branch offices to your company network
- your company network to the Internet
- new networks to your company network
Answer: A
9In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three).
- when a matching TCP connection is found
- when the firewall requires strict HTTP inspection
- when the firewall receives a FIN packet
- when matching ACL entries are configured
- when the firewall requires HTTP inspection
- when matching NAT entries are configured
Answer:
10If a switch port goes directly into a blocked state only when a superior BPDU is received, what mechanism must be in use?
- STP BPDU guard
- loop guard
- STP Root guard
- EtherChannel guard
Answer: A
Want the full bank of 129 questions for 210-260? See all practice exams.