Easily get the latest Cisco CCNA Security 210-260 dumps, “Implementing Cisco Network Security (IINS)” 210-260 Exam. You can upgrade your skills by downloading the 210-260 pdf or the online 210-260 exam exercise test! 99.5% pass rate:lead4pass.com
Table of Contents:
- Latest Nicky Cisco CCNA Security 210-260 pdf
- Latest Cisco CCNA Security 210-260 Practice Questions and Answers
- Latest Cisco CCNA Security 210-260 YouTube videos:
- Related 210-260 Popular Exam resources
- Lead4pass Promo Code 12% Off
- Why Choose Lead4pass?
Latest Nicky Cisco CCNA Security 210-260 pdf
[PDF] Free Cisco CCNA Security 210-260 pdf dumps download from Google Drive: https://drive.google.com/open?id=18g6SvjFACTYNFLSKSTyQQ9v_tk78GEnN
[PDF] Free Full Cisco pdf dumps download from Google Drive: https://drive.google.com/open?id=1CMo2G21nPLf7ZmI-3_hBpr4GDKRQWrGx
210-260 IINS – Cisco: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/iins-210-260.html
Latest Cisco CCNA Security 210-260 Practice Questions and Answers
QUESTION 1
How does a zone pair handle traffic if the policy definition of the zone pair is missing?
A. It permits all traffic without logging.
B. It drops all traffic.
C. It inspects all traffic.
D. It permits and logs all traffic.
Correct Answer: B
QUESTION 2
What is a reason for an organization to deploy a personal firewall?
A. To protect endpoints such as desktops from malicious activity.
B. To protect one virtual network segment from another.
C. To determine whether a host meets minimum security posture requirements.
D. To create a separate, non-persistent virtual environment that can be destroyed after a session.
E. To protect the network from DoS and syn-flood attacks.
Correct Answer: A
The term personal firewall typically applies to the basic software that can control Layer 3 and Layer 4 access to client
machines. HIPS provides several features that offer more robust security than a traditional personal firewall, such as
host intrusion prevention and protection against spyware, viruses, worms, Trojans, and other types of malware. Source:
Cisco Official Certification Guide, Personal Firewalls and Host Intrusion Prevention Systems, p.499
QUESTION 3
In which three ways does the RADIUS protocol differ from TACACS? (Choose three.)
A. RADIUS uses UDP to communicate with the NAS.
B. RADIUS encrypts only the password field in an authentication packet.
C. RADIUS authenticates and authorizes simultaneously, causing fewer packets to be transmitted.
D. RADIUS uses TCP to communicate with the NAS.
E. RADIUS can encrypt the entire packet that is sent to the NAS.
F. RADIUS supports per-command authorization.
Correct Answer: ABC
QUESTION 4
Which protocol offers data integrity, encryption, authentication, and antireplay functions for IPsec VPN?
A. AH protocol
B. ESP protocol
C. IKEv2 protocol
D. IKEv1 protocol
Correct Answer: B
IP Security Protocol—Encapsulating Security Payload (ESP)
Encapsulating Security Payload (ESP) is a security protocol used to provide confidentiality (encryption), data origin
authentication, integrity, optional antireplay service, and limited traffic flow confidentiality by defeating traffic flow
analysis.
http://www.ciscopress.com/articles/article.asp?p=24833andamp;s
