210-260 Exam - IINS Implementing Cisco Network Security

Question No: 6

Which option describes information that must be considered when you apply an access list to a physical interface?

A. Protocol used for filtering

B. Direction of the access class

C. Direction of the access group

D. Direction of the access list

View Answer

Question No: 7

In which two situations should you use in-band management? (Choose two.)

A. when management applications need concurrent access to the device

B. when you require administrator access from multiple locations

C. when a network device fails to forward packets

D. when you require ROMMON access

E. when the control plane fails to respond

View Answer

Question No: 8

In a security context, which action can you take to address compliance?

A. Implement rules to prevent a vulnerability.

B. Correct or counteract a vulnerability.

C. Reduce the severity of a vulnerability.

D. Follow directions from the security appliance manufacturer to remediate a vulnerability.

View Answer

Question No: 9

Which sensor mode can deny attackers inline?

A. IPS

B. fail-close

C. IDS

D. fail-open

View Answer

Question No: 10

Which two characteristics apply to an Intrusion Prevention System (IPS) ? Choose two

A. Does not add delay to the original traffic.

B. Cabled directly inline with the flow of the network traffic.

C. Can drop traffic based on a set of rules.

D. Runs in promoscous mode.

E. Cannot drop the packet on its own

View Answer

Question No: 11

Which of the following statements about access lists are true? (Choose three.)

A. Extended access lists should be placed as near as possible to the destination

B. Extended access lists should be placed as near as possible to the source

C. Standard access lists should be placed as near as possible to the destination

D. Standard access lists should be placed as near as possible to the source

E. Standard access lists filter on the source address

F. Standard access lists filter on the destination address

View Answer

Question No: 12

Which type of PVLAN port allows a host in the same VLAN to communicate only with promiscuous hosts?

A. Community host in the PVLAN

B. Isolated host in the PVLAN

C. Promiscuous host in the PVLAN

D. Span for host in the PVLAN

View Answer

Question No: 13

Refer to the exhibit.

For which reason is the tunnel unable to pass traffic?

A. UDP port 500 is blocked.

B. The IP address of the remote peer is incorrect.

C. The tunnel is failing to receive traffic from the remote peer.

D. The local peer is unable to encrypt the traffic.

View Answer

Question No: 14

Refer to the below.

Which statement about this debug output is true?

A. The requesting authentication request came from username GETUSER.

B. The TACACS+ authentication request came from a valid user.

C. The TACACS+ authentication request passed, but for some reason the user's connection was closed immediately.

D. The initiating connection request was being spoofed by a different source address.

View Answer

Question No: 15

When an administrator initiates a device wipe command from the ISE, what is the immediate effect?

A. It requests the administrator to choose between erasing all device data or only managed corporate data.

B. It requests the administrator to enter the device PIN or password before proceeding with the operation.

C. It notifies the device user and proceeds with the erase operation.

D. It immediately erases all data on the device.

View Answer