CCNA Security 210-260 IINS - Exam 2

In which three ways does the RADIUS protocol differ from TACACS? (choose two)

Which countermeasures can mitigate ARP spoofing attacks? (Choose two)

In which three cases does the ASA firewall permit inbound HTTP GET requests during normal operations? (Choose three)

In which two situations should you use in-band management? (Choose two)

Which components does HMAC use to determine the authenticity and integrity of a message? (Choose two)

Which security measures can protect the control plane of a Cisco router? (Choose two)

Which RADIUS server authentication protocols are suported on Cisco ASA firewalls? (Choose three)

Which TACACS+ server authentication protocols are supported on Cisco ASA firewalls? (Choose three)

Which statement about reflexive access lists are true? (Choose three)

According to Cisco best practices, which three protocols should the default ACL allow on an access port to enable wired BYOD devices to supply valid credentials and connect to the network? (Choose three)

Which two next-generation encryption algorithms does Cisco recommend? (Choose two)

Which three statements describe DHCP spoofing attacks? (Choose three)

Which three ESP fields can be encrypted during transmission? (Choose three)

In which three ways does the TACACS protocol differ from RADIUS? (Choose three)

Which accounting notices are used to send a failed authentication attempt record to a AAA server? (Choose two)

Which options are filtering options used to display SDEE message types? (Choose two)

Which protocols use encryption to protect the confidentiality of data transmitted between two parties? (Choose two)

What are two uses of SIEM software? (Choose two)

You want to allow all of your company's users to access the Internet without allowing other web servers to collect the IP Addresses of individual users. What two solutions can you use? (Choose two)

A data breach has occurred and your company database has been copied. Which security principle has been violated?

Which alert protocol is used with Cisco IPS Manager Express to support up to 10 sensors?

How can you detect a false negative on an IPS?

Which statement provides the best definition of malware?

How can FirePOWER block malicious email attachments?

A clientless SSL VPN user who is connecting on a Windows Vista computer is missing the menu option for Remote Desktop Protocol on the portal web page. Which action should you take to begin troubleshooting?

Refer to the following commands: crypto map mymap match address 201 access-list 201 permit ip 10.10.10.0 255.255.255.0 10.100.100.0 255.255.255.0 What is the effect of the given command sequence?

Which Cisco Security Manager application collects information about the device status and uses it to generate notifications and alerts?

You have been tasked with blocking user access to websites that violate company policy, but the sites use dynamic IP addresses. What is the best practice for URL filtering to solve the problem?

Which Sourcefire event action should you choose if you want to block only malicious traffic from a particular end user?

You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security intelligence iP Address Reputation. A user calls and is not able to access a certain IP Address. What action can you take to allow the user access to the IP address?

Refer to the following commands: authentication event fail action next-method authentication event no-response action authorize vlan 101 authentication order mab dot1x webauth authentication priority dot1x mab authentication port-control auto dot1x pae authenticator If a supplicant supplies incorrect credentials for all authentication methods configured on the switch, how will the switch respond?

In which stage on an attack does the attacker discover devices on a target network?

Which statement about personal firewalls is true?

What is a possible reason for the error message: Router(config)#aaa server? % Unrecognized command

Which command is needed to enable SSH support on a Cisco Router?

What is the transition order of STP in states on a Layer 2 switch interface?

Which type of PVLAN port allows hosts in the same VLAN to communicate directly with each other?

What is the default timeout interval during which a router waits for responses from a TACACS server before declaring a timeout failure?

Refer to the following output: R1>show clock detail .22.22:35.123 UTC Tue Feb 26 2013 Time source is NTP Which statement about the device time is true?

Refer to the following output: 209.114.111.1 configured, ipv4, sane, valid, stratum 2 ref ID 132.163.4.103 , time D7AD124D.9D6FC576 (03:17:33.614 UTC Sun Aug 31 2014) our mode client, peer mode server, our poll intvl 64, peer poll intvl 64 root delay 46.34 msec, root disp 23.52, reach 1, sync dist 268.59 delay 63.27msec, offset 7.9817 msec, dispersion 107.56, jitter 2.07 msec precision 2**23, version 4 204.2.134.164 configured, ipv4, sane, valid, stratum 2 ref ID 10.241.199.164.101, time D7AD1419.9EB5272B (03:25:13.619 UTC Sun Aug 31 2014) our mode client, peer mode server, our poll intvl 64, peer poll intvl 256 root delay 30.83 msec, root disp 4.88, reach 1, sync dist 223.80 delay 58.68msec, offset 6.4331 msec, dispersion 187.55, jitter 1.38 msec precision 2**20, version 4 192.168.10.7 configured, ipv4, our_master, sane, valid, stratum 3 ref ID 106.61.73.243 , time D7AD0D8F.AE79A23A (02:57:19.681 UTC Sun Aug 31 2014) our mode client, peer mode server, our poll intvl 64, peer poll intvl 64 root delay 86.45 msec, root disp 87.82, reach 377, sync dist 134.25 delay 0.89 msec, offset 19.5087 msec, dispersion 1.69, jitter 0.84 msec precision 2**32, version 4 With which NTP server has the router synchronized?

For what reason would you configure multiple security contexts on the ASA firewall?

Which type of encryption technology has the broadest platform support to protect operating systems?

Which type of security control is defense in depth?

When an IPS detects an attack, which action can the IPS take to prevent the attack from spreading?

Which FirePOWER preprocessor engine is used to prevent SYN attacks?

What is a potential drawback to leaving VLAN 1 as the native VLAN?

Which Cisco feature can help mitigate spoofing attacks by verifying symmetry of the traffic path?

If a switch receives a superior BPDU and goes directly into a blocked state, what mechanism must be in use?

How does the Cisco ASA use Active Directory to authorize VPN users?

What command can you use to verify the binding table status?