210-260 Exam - IINS Implementing Cisco Network Security

Question No: 13

Which three statements describe DHCP spoofing attacks? (Choose three.)

A. They can modify traffic in transit.

B. They are used to perform man-in-the-middle attacks.

C. They use ARP poisoning.

D. They can access most network devices.

E. They protect the identity of the attacker by masking the DHCP address.

F. They are can physically modify the network gateway.

View Answer

Question No: 14

SSL certificates are issued by Certificate Authority(CA) are?

A. Trusted root

B. Not trusted

View Answer

Question No: 15

Which statement about application blocking is true?

A. It blocks access to specific programs.

B. It blocks access to files with specific extensions.

C. It blocks access to specific network addresses.

D. It blocks access to specific network services.

View Answer

Question No: 16

Scenario

In this simulation, you have access to ASDM only. Review the various ASA configurations using ASDM then answer the five multiple choice questions about the ASA SSLVPN configurations.

To access ASDM, click the ASA icon in the topology diagram. Note: Not all ASDM functionalities are enabled in this simulation.

To see all the menu options available on the left navigation pane, you may also need to un- expand the expanded menu first.

When users login to the Clientless SSLVPN using https://209.165.201.2/test, which group policy will be applied?

A. test

B. clientless

C. Sales

D. DfltGrpPolicy

E. DefaultRAGroup

F. DefaultWEBVPNGroup

View Answer

Question No: 17

In which two situations should you use out-of-band management? (Choose two.)

A. when a network device fails to forward packets

B. when you require ROMMON access

C. when management applications need concurrent access to the device

D. when you require administrator access from multiple locations

E. when the control plane fails to respond

View Answer

Question No: 18

Refer to the exhibit.

The Admin user is unable to enter configuration mode on a device with the given configuration. What change can you make to the configuration to correct the problem?

A. Remove the autocommand keyword and arguments from the username admin privilege line.

B. Change the Privilege exec level value to 15.

C. Remove the two Username Admin lines.

D. Remove the Privilege exec line.

View Answer

Question No: 19

What is the most common Cisco Discovery Protocol version 1 attack?

A. Denial of Service

B. MAC-address spoofing

C. CAM-table overflow

D. VLAN hopping

View Answer

Question No: 20

A specific URL has been identified as containing malware. What action can you take to block users from accidentally visiting the URL and becoming infected with malware.

A. Enable URL filtering on the perimeter router and add the URLs you want to block to the router's local URL list.

B. Enable URL filtering on the perimeter firewall and add the URLs you want to allow to the router's local URL list.

C. Enable URL filtering on the perimeter router and add the URLs you want to allow to the firewall's local URL list.

D. Create a blacklist that contains the URL you want to block and activate the blacklist on the perimeter router.

E. Create a whitelist that contains the URLs you want to allow and activate the whitelist on the perimeter router.

View Answer

Question No: 21

SYN flood attack is a form of ?

A. Denial of Service attack

B. Man in the middle attack

C. Spoofing attack

View Answer

Question No: 22

which are two valid TCP connection states (pick 2) is the gist of the question.

A. SYN-RCVD

B. Closed

C. SYN-WAIT

D. RCVD

E. SENT

View Answer