Share some CCNA Security 210-260 exam questions and answers below.
If you change the native VLAN on the trunk port to an unused VLAN, what happens if an attacker attempts a double-tagging attack?
A. The trunk port would go into an error-disabled state.
B. A VLAN hopping attack would be successful.
C. A VLAN hopping attack would be prevented.
D. The attacked VLAN will be pruned.
Answer: C
When an IPS detects an attack, which action can the IPS take to prevent the attack from spreading?
A. Deny the connection inline.
B. Perform a Layer 6 reset.
C. Deploy an antimalware system.
D. Enable bypass mode.
Answer: A
What is a reason for an organization to deploy a personal firewall?
A. To protect endpoints such as desktops from malicious activity.
B. To protect one virtual network segment from another.
C. To determine whether a host meets minimum security posture requirements.
D. To create a separate, non-persistent virtual environment that can be destroyed after a session.
E. To protect the network from DoS and syn-flood attacks.
Answer: A
Which two features do CoPP and CPPr use to protect the control plane? (Choose two.)
A. QoS
B. traffic classification
C. access lists
D. policy maps
E. class maps
F. Cisco Express Forwarding
Answer: A,B
What command can you use to verify the binding table status?
A. show ip dhcp snooping database
B. show ip dhcp snooping binding
C. show ip dhcp snooping statistics
D. show ip dhcp pool
E. show ip dhcp source binding
F. show ip dhcp snooping
Answer: A
What is the effect of the send-lifetime local 23:59:00 31 December 31 2013 infinite command?
A. It configures the device to begin transmitting the authentication key to other devices at 00:00:00 local time on January 1, 2014 and continue using the key indefinitely.
B. It configures the device to begin transmitting the authentication key to other devices at 23:59:00 local time on December 31, 2013 and continue using the key indefinitely.
C. It configures the device to begin accepting the authentication key from other devices immediately and stop accepting the key at 23:59:00 local time on December 31, 2013.
D. It configures the device to generate a new authentication key and transmit it to other devices at 23:59:00 local time on December 31, 2013.
E. It configures the device to begin accepting the authentication key from other devices at 23:59:00 local time on December 31, 2013 and continue accepting the key indefinitely.
F. It configures the device to begin accepting the authentication key from other devices at 00:00:00 local time on January 1, 2014 and continue accepting the key indefinitely.
Answer: B
Which statement about personal firewalls is true?
A. They can protect a system by denying probing requests.
B. They are resilient against kernel attacks.
C. They can protect email messages and private documents in a similar way to a VPN.
D. They can protect the network against attacks.
Answer: A
An attacker installs a rogue switch that sends superior BPDUs on your network. What is a possible result of this activity?
A. The switch could offer fake DHCP addresses.
B. The switch could become the root bridge.
C. The switch could be allowed to join the VTP domain.
D. The switch could become a transparent bridge.
Answer: B
Passtcert Implementing Cisco Network Security 210-260 IINS exam dumps can help you save a lot of your precious time and energy.Passtcert is a website which can give much convenience and meet the needs and achieve dreams for many people participating IT certification exams. If you are still worrying about passing some IT certification exams, please choose Passtcert to help you. Passtcert can make you feel at ease, because we have a lot of Implementing Cisco Network Security 210-260 IINS exam dumps with high quality, coverage of the outline and pertinence, too, which will bring you a lot of help. You won't regret to choose Passtcert, it can help you build your dream career.As we all know, Passtcert Implementing Cisco Network Security 210-260 IINS exam dumps have very high profile, and it is also well-known in the worldwide.
Currently, Passtcert uniquely has the latest Implementing Cisco Network Security 210-260 IINS exam dumps.All the IT professionals are familiar with the Cisco 210-260 exam. And all of you dream of owning the most demanding certification. So that you can get the career you want, and can achieve your dreams. With Passtcert Implementing Cisco Network Security 210-260 IINS exam dumps, you can get what you want.
Related article: http://70-761-dumps.blogspot.com/2017/09/new-update-cisco-210-260-iins-training.html
No comments:
Post a Comment