210-260 Exam Dumps | You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security

Home
Cisco
Implementing Cisco Network Security
Cisco.210-260.v2018-03-23.q133
Question 124

Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:

Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 124/133

You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP Address Reputation. A user calls and is not able to access a certain IP address. What action can you take to allow the user access to the IP address?

A. Create a whitelist and add the appropriate IP address to allow the traffic.

B. Create a custom blacklist to allow the traffic.

C. Create a user based access control rule to allow the traffic.

D. Create a network based access control rule to allow the traffic.

E. Create a rule to bypass inspection to allow the traffic.

Correct Answer: A

Explanation/Reference:
When a blacklist is too broad in scope, or incorrectly blocks traffic that you want to allow (for example, to vital resources), you can override a blacklist with a custom whitelist.
Reference: http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System- UserGuide-v5401/AC-Secint-Blacklisting.html

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (133q): Question 1: In what type of attack does an attacker virtually change a d...; Question 2: Which type of firewall can act on the behalf of the end devi...; Question 3: Refer to the exhibit. (Exhibit) With which NTP server has th...; Question 4: Which of the following are features of IPsec transport mode?...; Question 5: What is the only permitted operation for processing multicas...; Question 6: Which accounting notices are used to send a failed authentic...; Question 7: Which firewall configuration must you perform to allow traff...; Question 8: Which statement about communication over failover interfaces...; Question 9: What is the transition order of STP states on a Layer 2 swit...; Question 10: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 11: Which Cisco feature can help mitigate spoofing attacks by ve...; Question 12: Refer to the exhibit. (Exhibit) If a supplicant supplies inc...; Question 13: What VPN feature allows traffic to exit the security applian...; Question 14: Which three statements describe DHCP spoofing attacks? (Choo...; Question 15: Refer to the exhibit. (Exhibit) What are two effects of the ...; Question 16: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 17: How does a device on a network using ISE receive its digital...; Question 18: Which sensor mode can deny attackers inline?...; Question 19: Which Sourcefire event action should you choose if you want ...; Question 20: What type of packet creates and performs network operations ...; Question 21: Which actions can a promiscuous IPS take to mitigate an atta...; Question 22: In which type of attack does an attacker send email messages...; Question 23: What is true about the Cisco IOS Resilient Configuration fea...; Question 24: How can you protect CDP from reconnaissance attacks?...; Question 25: Which command will configure a Cisco ASA firewall to authent...; Question 26: Refer to the exhibit. (Exhibit) The Admin user is unable to ...; Question 27: Which product can be used to provide application layer prote...; Question 28: What is the purpose of a honeypot IPS?...; Question 29: Which feature filters CoPP packets?...; Question 30: Which statement about a PVLAN isolated port configured on a ...; Question 31: Which Cisco product can help mitigate web-based attacks with...; Question 32: How does a zone-based firewall implementation handle traffic...; Question 33: Scenario In this simulation, you have access to ASDM only. R...; Question 34: Which statement about the communication between interfaces o...; Question 35: Scenario In this simulation, you have access to ASDM only. R...; Question 36: Which quantifiable item should you consider when your organi...; Question 37: Which command causes a Layer 2 switch interface to operate a...; Question 38: What are purposes of the Internet Key Exchange in an IPsec V...; Question 39: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 40: How many crypto map sets can you apply to a router interface...; Question 41: What is a potential drawback to leaving VLAN 1 as the native...; Question 42: By which kind of threat is the victim tricked into entering ...; Question 43: Which statement about application blocking is true?...; Question 44: Which two statements about Telnet access to the ASA are true...; Question 45: DRAG DROP Drag the hash or algorithm from the left column to...; Question 46: Which feature of the Cisco Email Security Appliance can miti...; Question 47: After reloading a router, you issue the dir command to verif...; Question 48: Which IPS mode provides the maximum number of actions?...; Question 49: Which protocol provides security to Secure Copy?...; Question 50: Your security team has discovered a malicious program that h...; Question 51: What can the SMTP preprocessor in FirePOWER normalize?...; Question 52: Which type of encryption technology has the broadest platfor...; Question 53: What are the three layers of a hierarchical network design? ...; Question 54: If you change the native VLAN on the trunk port to an unused...; Question 55: Which option describes information that must be considered w...; Question 56: How can you detect a false negative on an IPS?...; Question 57: Which TACACS+ server-authentication protocols are supported ...; Question 58: What features can protect the data plane? (Choose three.)...; Question 59: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 60: Scenario In this simulation, you have access to ASDM only. R...; Question 61: Which statement provides the best definition of malware?...; Question 62: When an administrator initiates a device wipe command from t...; Question 63: Refer to the exhibit. (Exhibit) Which statement about the gi...; Question 64: Which statement correctly describes the function of a privat...; Question 65: SIMULATION Scenario Given the new additional connectivity re...; Question 66: What mechanism does asymmetric cryptography use to secure da...; Question 67: Which security zone is automatically defined by the system?...; Question 68: Which type of PVLAN port allows hosts in the same VLAN to co...; Question 69: Which IDS/IPS solution can monitor system processes and reso...; Question 70: You want to allow all of your company's users to access the ...; Question 71: Which NAT type allows only objects or groups to reference an...; Question 72: How does PEAP protect the EAP exchange?...; Question 73: What is an advantage of placing an IPS on the inside of a ne...; Question 74: Which statement about IOS privilege levels is true?...; Question 75: Which FirePOWER preprocessor engine is used to prevent SYN a...; Question 76: What is one requirement for locking a wired or wireless devi...; Question 77: When is the default deny all policy an exception in zone-bas...; Question 78: Which technology can be used to rate data fidelity and to pr...; Question 79: What is a valid implicit permit rule for traffic that is tra...; Question 80: What is the most common Cisco Discovery Protocol version 1 a...; Question 81: Refer to the exhibit. (Exhibit) Which area represents the da...; Question 82: Which command is needed to enable SSH support on a Cisco Rou...; Question 83: For what reason would you configure multiple security contex...; Question 84: A clientless SSL VPN user who is connecting on a Windows Vis...; Question 85: Refer to the exhibit. (Exhibit) A network security administr...; Question 86: Which options are filtering options used to display SDEE mes...; Question 87: Which Cisco Security Manager application collects informatio...; Question 88: What security feature allows a private IP address to access ...; Question 89: Which Sourcefire logging action should you choose to record ...; Question 90: Which statement about personal firewalls is true?...; Question 91: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 92: Which two are the default settings for port security? (Choos...; Question 93: When is the best time to perform an anti-virus signature upd...; Question 94: In which three ways does the RADIUS protocol differ from TAC...; Question 95: Which EAP method uses Protected Access Credentials?...; Question 96: Which statements about reflexive access lists are true? (Cho...; Question 97: What is the effect of the send-lifetime local 23:59:00 31 De...; Question 98: In which two situations should you use in-band management? (...; Question 99: Refer to the exhibit. (Exhibit) What type of firewall would ...; Question 100: In the router ospf 200 command, what does the value 200 stan...; Question 101: In which type of attack does the attacker attempt to overloa...; Question 102: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 103: Which syslog severity level is level number 7?...; Question 104: If a switch receives a superior BPDU and goes directly into ...; Question 105: Which option is the cloud-based security service from Cisco ...; Question 106: An attacker installs a rogue switch that sends superior BPDU...; Question 107: You have been tasked with blocking user access to websites t...; Question 108: Which wildcard mask is associated with a subnet mask of /27?...; Question 109: If a packet matches more than one class map in an individual...; Question 110: What is the primary purpose of a defined rule in an IPS?...; Question 111: Which two actions can a zone-based firewall take when lookin...; Question 112: Which source port does IKE use when NAT has been detected be...; Question 113: What VPN feature allows Internet traffic and local LAN/WAN t...; Question 114: When a company puts a security policy in place, what is the ...; Question 115: Which statements about smart tunnels on a Cisco firewall are...; Question 116: Which network device does NTP authenticate?...; Question 117: Which address block is reserved for locally assigned unique ...; Question 118: How can FirePOWER block malicious email attachments?...; Question 119: What are two ways to prevent eavesdropping when you perform ...; Question 120: Which two options are the primary deployment models for mobi...; Question 121: In which three cases does the ASA firewall permit inbound HT...; Question 122: Scenario In this simulation, you have access to ASDM only. R...; Question 123: Refer to the exhibit. (Exhibit) Which line in this configura...; Question 124: You have implemented a Sourcefire IPS and configured it to b...; Question 125: What configuration allows AnyConnect to automatically establ...; Question 126: What is a reason for an organization to deploy a personal fi...; Question 127: What improvement does EAP-FASTv2 provide over EAP-FAST?...; Question 128: A specific URL has been identified as containing malware. Wh...; Question 129: Which type of mirroring does SPAN technology perform?...; Question 130: What is a benefit of a web application firewall?...; Question 131: Which tasks is the session management path responsible for? ...; Question 132: Refer to the exhibit. (Exhibit) You have configured R1 and R...; Question 133: Which type of IPS can identify worms that are propagating in...

[×]

Download PDF File

Enter your email address to download Cisco.210-260.v2018-03-23.q133.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 124/133

LEAVE A REPLY

Download PDF File