This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ]

Export date:Fri Nov 22 3:36:11 2024 / +0000 GMT

___________________________________________________


Title: [2016 NEW][Braindump2go] CCNA Security 210-260 Book Free Download

---------------------------------------------------


2016 NEW CCNA Security 210-260 Exam Questions &amp; 210-260 Dump Released Today!2016 NEW ADDED 210-260 Exam Questions Free Share: QUESTION 131Which three statements about Cisco host-based IPS solution are true? (Choose three) A.&nbsp;&nbsp;&nbsp; It work with deployed firewalls.B.&nbsp;&nbsp;&nbsp; It can be deployed at the perimeterC.&nbsp;&nbsp;&nbsp; It uses signature-based policiesD.&nbsp;&nbsp;&nbsp; It can have more restrictive policies than network-based IPSE.&nbsp;&nbsp;&nbsp; It can generate alerts based on behavior at the desktop levelF.&nbsp;&nbsp;&nbsp; It can view encrypted files Answer: DEFExplanation:The key word here is 'Cisco', and Cisco's host-based IPS, CSA, is NOT signature-based and CAN view encrypted files. QUESTION 132What are two users of SIEM software? (Choose two) A.&nbsp;&nbsp;&nbsp; performing automatic network auditsB.&nbsp;&nbsp;&nbsp; configuring firewall and IDS devicesC.&nbsp;&nbsp;&nbsp; alerting administrators to security events in real timeD.&nbsp;&nbsp;&nbsp; scanning emails for suspicious attachmentsE.&nbsp;&nbsp;&nbsp; collecting and archiving syslog data Answer: CEExplanation:The other choices are not functions of SIEM software. QUESTION 133If a packet matches more than one class map in an individual feature type's policy map, how does the ASA handle the packet? A.&nbsp;&nbsp;&nbsp; the ASA will apply the actions from only the last matching class maps it finds for the feature type.B.&nbsp;&nbsp;&nbsp; the ASA will apply the actions from all matching class maps it finds for the feature type.C.&nbsp;&nbsp;&nbsp; the ASA will apply the actions from only the most specific matching class map it finds for the feature type.D.&nbsp;&nbsp;&nbsp; the ASA will apply the actions from only the first matching class maps it finds for the feature type Answer: DExplanation:If it matches a class map for a given feature type, it will NOT attempt to match to any subsequent class maps. QUESTION 134What statement provides the best definition of malware? A.&nbsp;&nbsp;&nbsp; Malware is tools and applications that remove unwanted programs.B.&nbsp;&nbsp;&nbsp; Malware is a software used by nation states to commit cyber-crimes.C.&nbsp;&nbsp;&nbsp; Malware is unwanted software that is harmful or destructiveD.&nbsp;&nbsp;&nbsp; Malware is a collection of worms, viruses and Trojan horses that is distributed as a single..... Answer: C QUESTION 135What command can you use to verify the binding table status? A.&nbsp;&nbsp;&nbsp; show ip dhcp snooping statisticsB.&nbsp;&nbsp;&nbsp; show ip dhcp snooping databaseC.&nbsp;&nbsp;&nbsp; show ip dhcp snooping bindingD.&nbsp;&nbsp;&nbsp; show ip dhcp poolE.&nbsp;&nbsp;&nbsp; show ip dhcp snoopingF.&nbsp;&nbsp;&nbsp; show ip dhcp source binding Answer: B QUESTION 136Which FirePOWER preprocessor engine is used to prevent SYN attacks? A.&nbsp;&nbsp;&nbsp; Anomaly.B.&nbsp;&nbsp;&nbsp; Rate-Based PreventionC.&nbsp;&nbsp;&nbsp; Portscan DetectionD.&nbsp;&nbsp;&nbsp; Inline Normalization Answer: B QUESTION 137What is the only permitted operation for processing multicast traffic on zone-based firewalls? A.&nbsp;&nbsp;&nbsp; Stateful inspection of multicast traffic is supported only for the self-zone.B.&nbsp;&nbsp;&nbsp; Stateful inspection of multicast traffic is supported only between the self-zone and the internal zone.C.&nbsp;&nbsp;&nbsp; Only control plane policing can protect the control plane against multicast traffic.D.&nbsp;&nbsp;&nbsp; Stateful inspection of multicast traffic is supported only for the internal zone Answer: CExplanation:Stateful inspection of multicast traffic is NOT supported by Cisco Zone based firewalls OR Cisco Classic firewall. QUESTION 138Which of encryption technology has the broadcast platform support to protect operating systems? A.&nbsp;&nbsp;&nbsp; MiddlewareB.&nbsp;&nbsp;&nbsp; HardwareC.&nbsp;&nbsp;&nbsp; softwareD.&nbsp;&nbsp;&nbsp; file-level Answer: DExplanation:Allow with Inspection allows all traffic except for malicious traffic from a particular end-user. The other options are too restrictive, too permissive, or don't exist. QUESTION 139Which feature of the Cisco Email Security Appliance can mitigate the impact of snowshoe spam and sophisticated phishing attack? A.&nbsp;&nbsp;&nbsp; holistic understanding of threatsB.&nbsp;&nbsp;&nbsp; graymail management and filteringC.&nbsp;&nbsp;&nbsp; signature-based IPSD.&nbsp;&nbsp;&nbsp; contextual analysis Answer: D QUESTION 140Which Sourfire secure action should you choose if you want to block only malicious traffic from a particular end-user? A.&nbsp;&nbsp;&nbsp; TrustB.&nbsp;&nbsp;&nbsp; BlockC.&nbsp;&nbsp;&nbsp; Allow without inspectionD.&nbsp;&nbsp;&nbsp; MonitorE.&nbsp;&nbsp;&nbsp; Allow with inspection Answer: EExplanation:Allow with Inspection allows all traffic except for malicious traffic from a particular end-user. The other options are too restrictive, too permissive, or don't exist.   2016 NEW CCNA Security 210-260 Exam Questions &amp; 210-260 Dump 185Q Full Version Free Shared By Braindump2go: http://www.braindump2go.com/210-260.html  

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2016-02-19 08:56:25

Post date GMT: 2016-02-19 08:56:25

Post modified date: 2016-02-19 08:56:25

Post modified date GMT: 2016-02-19 08:56:25



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com