210-260 Exam Dumps | How does the Cisco ASA use Active Directory to authorize VPN users?

Home
Cisco
Implementing Cisco Network Security
Cisco.210-260.v2018-04-02.q137
Question 86

Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:

Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 86/137

How does the Cisco ASA use Active Directory to authorize VPN users?

A. It queries the Active Directory server for a specific attribute for the specified user.

B. It sends the username and password to retrieve an ACCEPT or REJECT message from the Active Directory server.

C. It downloads and stores the Active Directory database to query for future authorization requests.

D. It redirects requests to the Active Directory server defined for the VPN group.

Correct Answer: A

Explanation/Reference:
Explanation:
When user LDAP authentication for VPN access has succeeded, the ASA queries the LDAP server, which returns LDAP, attributes. These attributes generally include authorization data that applies to the VPN session. Thus, using LDAP accomplishes authentication and authorization in a single step.
Reference: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/ access_aaa.html

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (137q): 1 commentQuestion 1: What are two uses of SIEM software? (Choose two.)...; Question 2: Which Cisco Security Manager application collects informatio...; Question 3: Which syslog severity level is level number 7?...; Question 4: What VPN feature allows traffic to exit the security applian...; Question 5: Which actions can a promiscuous IPS take to mitigate an atta...; Question 6: What features can protect the data plane? (Choose three.)...; Question 7: Which command is needed to enable SSH support on a Cisco Rou...; Question 8: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 9: Which accounting notices are used to send a failed authentic...; Question 10: Which network device does NTP authenticate?...; Question 11: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 12: Scenario In this simulation, you have access to ASDM only. R...; Question 13: Which source port does IKE use when NAT has been detected be...; Question 14: Which two authentication types does OSPF support? (Choose tw...; Question 15: Which Cisco feature can help mitigate spoofing attacks by ve...; Question 16: You want to allow all of your company's users to access the ...; Question 17: Which EAP method uses Protected Access Credentials?...; Question 18: Which option describes information that must be considered w...; Question 19: Which Sourcefire logging action should you choose to record ...; Question 20: Which type of IPS can identify worms that are propagating in...; Question 21: Which two services define cloud networks? (Choose two.)...; Question 22: Which components does HMAC use to determine the authenticity...; Question 23: Which three statements about host-based IPS are true? (Choos...; Question 24: Your security team has discovered a malicious program that h...; Question 25: By which kind of threat is the victim tricked into entering ...; Question 26: Which type of secure connectivity does an extranet provide?...; Question 27: What is one requirement for locking a wired or wireless devi...; Question 28: If the native VLAN on a trunk is different on each end of th...; Question 29: What is an advantage of placing an IPS on the inside of a ne...; Question 30: Scenario In this simulation, you have access to ASDM only. R...; Question 31: Which statement about communication over failover interfaces...; Question 32: Which option is the most effective placement of an IPS devic...; Question 33: Which statement about a PVLAN isolated port configured on a ...; Question 34: Which statement about extended access lists is true?...; Question 35: Which two next-generation encryption algorithms does Cisco r...; Question 36: Which TACACS+ server-authentication protocols are supported ...; Question 37: Which of the following statements about access lists are tru...; Question 38: Which of the following are features of IPsec transport mode?...; Question 39: When an IPS detects an attack, which action can the IPS take...; Question 40: Which security measures can protect the control plane of a C...; Question 41: What is a possible reason for the error message?Router(confi...; Question 42: Refer to the exhibit. (Exhibit) What type of firewall would ...; Question 43: Which sensor mode can deny attackers inline?...; Question 44: What is the default timeout interval during which a router w...; Question 45: What is the only permitted operation for processing multicas...; Question 46: Which type of security control is defense in depth?...; Question 47: A clientless SSL VPN user who is connecting on a Windows Vis...; Question 48: Refer to the exhibit. (Exhibit) How many times was a read-on...; Question 49: An attacker installs a rogue switch that sends superior BPDU...; Question 50: If a router configuration includes the line aaa authenticati...; Question 51: If a switch receives a superior BPDU and goes directly into ...; Question 52: Which command verifies phase 1 of an IPsec VPN on a Cisco ro...; Question 53: Which type of firewall can act on the behalf of the end devi...; Question 54: What type of security support is provided by the Open Web Ap...; Question 55: In a security context, which action can you take to address ...; Question 56: Which type of mirroring does SPAN technology perform?...; Question 57: Which protocol provides security to Secure Copy?...; Question 58: In which type of attack does an attacker send email messages...; Question 59: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 60: When is the best time to perform an anti-virus signature upd...; Question 61: What three actions are limitations when running IPS in promi...; Question 62: A specific URL has been identified as containing malware. Wh...; Question 63: Which statements about smart tunnels on a Cisco firewall are...; Question 64: Which statements about reflexive access lists are true? (Cho...; Question 65: What is the purpose of a honeypot IPS?...; Question 66: Which RADIUS server authentication protocols are supported o...; Question 67: Which three statements describe DHCP spoofing attacks? (Choo...; Question 68: How does a zone-based firewall implementation handle traffic...; Question 69: What can the SMTP preprocessor in FirePOWER normalize?...; Question 70: In which two situations should you use in-band management? (...; Question 71: If you change the native VLAN on the trunk port to an unused...; Question 72: What are the three layers of a hierarchical network design? ...; Question 73: Which tool can an attacker use to attempt a DDoS attack?...; Question 74: How many crypto map sets can you apply to a router interface...; Question 75: A data breach has occurred and your company database has bee...; Question 76: For what reason would you configure multiple security contex...; Question 77: What hash type does Cisco use to validate the integrity of d...; Question 78: How can the administrator enable permanent client installati...; Question 79: What are two ways to prevent eavesdropping when you perform ...; Question 80: What command can you use to verify the binding table status?...; Question 81: Which tasks is the session management path responsible for? ...; Question 82: In which three ways does the TACACS protocol differ from RAD...; Question 83: What is the effect of the send-lifetime local 23:59:00 31 De...; Question 84: What are the primary attack methods of VLAN hopping? (Choose...; Question 85: In which stage of an attack does the attacker discover devic...; Question 86: How does the Cisco ASA use Active Directory to authorize VPN...; Question 87: What is the most common Cisco Discovery Protocol version 1 a...; Question 88: You have implemented a Sourcefire IPS and configured it to b...; Question 89: Which command causes a Layer 2 switch interface to operate a...; Question 90: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 91: What type of attack was the Stuxnet virus?...; Question 92: Which type of address translation should be used when a Cisc...; Question 93: Which two features do CoPP and CPPr use to protect the contr...; Question 94: Which Cisco product can help mitigate web-based attacks with...; Question 95: What are purposes of the Internet Key Exchange in an IPsec V...; Question 96: Which two statements about stateless firewalls are true? (Ch...; Question 97: In which three ways does the RADIUS protocol differ from TAC...; Question 98: What is an advantage of implementing a Trusted Platform Modu...; Question 99: Scenario In this simulation, you have access to ASDM only. R...; Question 100: Which countermeasures can mitigate ARP spoofing attacks? (Ch...; Question 101: When a switch has multiple links connected to a downstream s...; Question 102: Which protocols use encryption to protect the confidentialit...; Question 103: Which alert protocol is used with Cisco IPS Manager Express ...; Question 104: After reloading a router, you issue the dir command to verif...; Question 105: What are two default Cisco IOS privilege levels? (Choose two...; Question 106: If a packet matches more than one class map in an individual...; Question 107: Refer to the exhibit. (Exhibit) If a supplicant supplies inc...; Question 108: Which statement correctly describes the function of a privat...; Question 109: Which statement about Cisco ACS authentication and authoriza...; Question 110: When a company puts a security policy in place, what is the ...; Question 111: What is the purpose of the Integrity component of the CIA tr...; Question 112: What is the Cisco preferred countermeasure to mitigate CAM o...; Question 113: Which FirePOWER preprocessor engine is used to prevent SYN a...; Question 114: What is the transition order of STP states on a Layer 2 swit...; Question 115: Which options are filtering options used to display SDEE mes...; Question 116: Which security zone is automatically defined by the system?...; Question 117: Which address block is reserved for locally assigned unique ...; Question 118: According to Cisco best practices, which three protocols sho...; Question 119: Refer to the exhibit. (Exhibit) The Admin user is unable to ...; Question 120: On which Cisco Configuration Professional screen do you enab...; Question 121: What is the FirePOWER impact flag used for?...; Question 122: SIMULATION Scenario Given the new additional connectivity re...; Question 123: Which wildcard mask is associated with a subnet mask of /27?...; Question 124: In what type of attack does an attacker virtually change a d...; Question 125: Scenario In this simulation, you have access to ASDM only. R...; Question 126: Which statement about application blocking is true?...; Question 127: Which command initializes a lawful intercept view?...; Question 128: In which two situations should you use out-of-band managemen...; Question 129: What VPN feature allows Internet traffic and local LAN/WAN t...; Question 130: What type of packet creates and performs network operations ...; Question 131: What type of algorithm uses the same key to encrypt and decr...; Question 132: What is a reason for an organization to deploy a personal fi...; Question 133: Which two statements about Telnet access to the ASA are true...; Question 134: Which statement about personal firewalls is true?...; Question 135: Which command will configure a Cisco ASA firewall to authent...; Question 136: Which three ESP fields can be encrypted during transmission?...; Question 137: Refer to the exhibit. (Exhibit) Which statement about the de...

[×]

Download PDF File

Enter your email address to download Cisco.210-260.v2018-04-02.q137.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 86/137

LEAVE A REPLY

Download PDF File