CCNA Security 210-260 IINS - Exam 3

Which command verifies phase 1 of an IPsec VPN on a Cisco router

What is a benefit of a web application firewall?

Refer to the following output: dst src state conn-id slot 10.10.10.2 10.1.1.5 QM_IDLE 1 0 While troubleshooting site-to-site VPN, you issued the show crypto isakmp sa command. What does the given output show?

Which statement about PVLAN isolated port configured on a switch is true?

What can the SMTP preprocessor in FirePOWER normalize?

When a switch has multiple links connected to a downstream switch, what is the first step that STP takes to prevent loops?

Which statement correctly describes the function of a private VLAN?

What is the purpose of a honeypot IPS?

Which protocol provides security to Secure Copy?

Which address block is reserved for locally assigned unique local addresses?

Which tool can an attacker use to attempt a DDoS attack?

How does a device on a network using ISE receive its digital certificate during the new device registration process?

Refer to the following output for R1 and R2: R1 interface GigabitEthernet 0/0 ip address 10.20.20.4 255.255.255.0 crypto isakmp policy 1 authenticaiton pre-share lifetime 84600 crypto isakmp key test67890 address 10.20.20.4 R2 interface GigabitEthernet 0/0 ip address 10.20.20.4 255.255.255.0 crypto isakmp policy 10 authentication pre-share lifetime 84600 crypto isakmp key test12345 address 10.30.30.5 You have configured R1 and R2 as shown but the routers are unable to establish a site-to-site VPN tunnel. What action can you take to correct the problem?

Refer to the following output: current_peer: 10.1.1.5 PERMIT, flags={origin_is_acl,) #pkts encaps: 1205, #pkts encrypt: 1205, #pkts digest 1205 #pkts decaps: 1168, #pkts decrypt 1168, #pkts verify 1168 #pkts compressed: 0, #pkts decompressed: 0 #pkts not complressed: 0, #pkts compr. failed: 0 #pkts decompress failed: 0, #send errors 0, #recv errors 0 local crypto endpt.: 10.1.1.1, remote crypto endpt.: 10.1.1.5 While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show?

In a security context, which action can you take to address compliance?

Which IPS mode provides the maximum number of actions?

By which kind of threat the victim is tricked into entering username and password information at a disguised website?

Which technology can be used to rate data fidelity and provide and authenticated hash for data?

In which type of attack does an attacker send email messages that ask the recipient to click a link such as https://www.cisco.net.cc/securelogon?

What configuration allows AnyConnect to automatically establish a VPN session when a user logs into the computer?

Which source port does IKE use when NAT has been detected between two VPN gateways?

Refer to the following commands: Username Engineer privilege 9 password 0 configure Username Monitor privilege 8 password 0 watcher Username HelpDesk privilege 6 password help Privilege exec level 6 show running Privilege exec level 7 show start-up Privilege exec level 9 configure terminal Privilege exec level 10 interface Which line in this configuration prevents the HelpDesk user from modifying the interface configuration

Which statement about extended access lists is true?

What is the Cisco preferred countermeasure to mitigate CAM overflows?

A specific URL has been identified as containing malware. What action can you take to block users from accidentally visiting the URL and becoming infected with malware?

Which feature filters CoPP packets?

Refer to the following output: dst src state conn-id slot 10.10.10.2 10.1.1.5 MM_NO_STATE 1 0 While troubleshooting site-to-site VPN, you issued the show crypto isakmp sa command. What does the given output show?

Refer to the following output: R1#show snmp 0 SNMP packets input 6 Bad SNMP version errors 3 Unknown community name 9 Illegal operation for community name supplied 4 Encoding errors 2 Number of requested variables 0 Number of altered variables 98 Get-request PDUs 12 Get-next PDUs 2 Set-request PDUs 0 Input queue packet drops (Maximum queue size 1000) 0 SNMP packets output 0 Too big errors (Maximum packet size 1500) 0 No such name errors 0 Bad values errors 0 General errors 31 Response PDUs 1 Trap PDUs How many times was a read-only string used to attempt a write operation?

After reloading a router, you issue the dir command to verify the installation and observe that the image file appears to be missing. For what reason could the image file fail to appear in the dir output?

When a company puts a security policy in place, what is the effect on the company's business?

What security feature allows a private IP address to access the internet by translating it to a public address?

Which type of mirroring does SPAN technology perform?

If you change the native VLAN on the trunk port to an unused VLAN, what happens if an attacker attempts a double-tagging attack?

What is the most common Cisco Discovery Protocol version 1 attack?

Refer to the following commands: Username HelpDesk privilege 9 password 0 helpdesk Username Monitor privilege 8 password 0 watcher Username Admin password checkme Username Admin privilege 6 autocommand show running Privilege exec level 6 configure terminal The Admin user is unable to enter configuration mode on a device with the given configuration. What change can you make to the configuration to correct the problem?

On which Cisco Configuration Professional screen do you enable AAA?

Which type of IPS can identify worms that are propagating in a network?

In the following command: router OSPF 200 What does the value 200 stand for?

Which statement about the communication between interfaces of the same security level is true?

Which wildcard mask is associated with a subnet mask of /27

Which option describes information that must be considered when you apply an access list to a physical interface?

What is the purpose of the integrity component of the CIA triad?

How does PEAP protect the EAP exchange?

If the native VLAN on a trunk is different on each end of the link, what is a potential consequence?

How does a zone-based firewall implementation handle traffic between interfaces in the same zone?

Refer to the following commands: tacacs server tacacs1 address ipv4 1.1.1.1 timeout 20 single-connection tacacs server tacacs2 address ipv4 2.2.2.2 timeout 20 single-connection tacacs server tacacs3 address ipv4 3.3.3.3 timeout 20 single-connection Which statement about the given configuration is true?

In which type of attack does the attacker attempt to overload the CAM table on a switch so that the switch acts as a hub?

Which syslog severity level is level number 7?

Refer to the following output: UDP outside 205.165.201.225:53 inside 10.0.0.10:52464, idle 0:00:01, bytes 266, flags - What type of firewall would use the given configuration line?

Which feature of the Cisco Email Security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attacks?

Which Sourcefire logging action should you choose to record the most detail about a connection?

When is the best time to perform an anti-virus signature update?

Which command initializes a lawful intercept view?

Which type of firewall can act on behalf of the end device?