210-260 Exam Dumps | Which actions can a promiscuous IPS take to mitigate an attack? (Choose three.)

Home
Cisco
Implementing Cisco Network Security
Cisco.210-260.v2019-08-06.q180
Question 164

Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:

Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)

<< Prev Question Next Question >>

Question 164/180

Which actions can a promiscuous IPS take to mitigate an attack? (Choose three.)

A. Modifying packets

B. Requesting connection blocking

C. Denying packets

D. Resetting the TCP connection

E. Requesting host blocking

F. Denying frames

Correct Answer: B,D,E

Explanation/Reference:
Explanation:
The following event actions can be deployed in Promiscuous mode. These actions are in affect for a user-
configurable default time of 30 minutes. Because the IPS sensor must send the request to another device
or craft a packet, latency is associated with these actions and could allow some attacks to be successful.
Blocking through usage of the Attack Response Controller (ARC) has the potential benefit of being able to
perform to the network edge or at multiple places within the network.
Request block host: This event action will send an ARC request to block the host for a specified time
frame, preventing any further communication. This is a severe action that is most appropriate when there
is minimal chance of a false alarm or spoofing.
Request block connection: This action will send an ARC response to block the specific connection. This
action is appropriate when there is potential for false alarms or spoofing.
Reset TCP connection: This action is TCP specific, and in instances where the attack requires several
TCP packets, this can be a successful action. However, in some cases where the attack only needs one
packet it may not work as well. Additionally, TCP resets are not very effective with protocols such as SMTP
that consistently try to establish new connections, nor are they effective if the reset cannot reach the
destination host in time.
Reference: http://www.cisco.com/c/en/us/about/security-center/ips-mitigation.html

Your email address will not be published. Required fields are marked *

Comment: *

Name: *

Email: *

Rating: *

Verification: *

Question List (180q): Question 1: Which statement about IOS privilege levels is true?...; Question 2: Which Sourcefire logging action should you choose to record ...; Question 3: Which IPS mode provides the maximum number of actions?...; Question 4: How does the 802.1x supplicant communicate with the authenti...; Question 5: Which quantifiable item should you consider when your organi...; Question 6: You have just deployed SNMPv3 in your environment. Your mana...; Question 7: Which security principle has been violated if data is altere...; Question 8: According to Cisco best practices, which three protocols sho...; Question 9: Refer to the exhibit. (Exhibit) What are two effects of the ...; Question 10: What are two reasons to recommend SNMPv3 over SNMPv2? (Choos...; Question 11: Which statement about zone-based firewall configuration is t...; Question 12: If the native VLAN on a trunk is different on each end of th...; Question 13: Refer to the exhibit. (Exhibit) What is the effect of the gi...; Question 14: What are two major considerations when choosing between a SP...; Question 15: What command can you use to verify the binding table status?...; Question 16: A clientless SSL VPN user who is connecting on a Windows Vis...; Question 17: Which path do you follow to enable AAA though the SDM?...; Question 18: You are configuring a NAT rule on a Cisco ASA. Which descrip...; Question 19: Which components does HMAC use to determine the authenticity...; Question 20: Refer to the exhibit. (Exhibit) With which NTP server has th...; Question 21: Which two types of firewalls work at Layer 4 and above? (Cho...; Question 22: Which two authentication types does OSPF support? (Choose tw...; Question 23: What are the three layers of a hierarchical network design? ...; Question 24: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 25: What is a reason for an organization to deploy a personal fi...; Question 26: On an ASA, which maps are used to identify traffic?...; Question 27: Referencing the CIA model, in which scenario is a hash-only ...; Question 28: In which three cases does the ASA firewall permit inbound HT...; Question 29: You have been tasked with blocking user access to websites t...; Question 30: Which term refers to the electromagnetic interference that c...; Question 31: Which IDS/IPS state misidentifies acceptable behavior as an ...; Question 32: Which command do you enter to configure your firewall to con...; Question 33: In which type of attack does an attacker overwrite an entry ...; Question 34: Which two next-generation encryption algorithms does Cisco r...; Question 35: Which two ESA services are available for incoming and outgoi...; Question 36: Which two commands are used to implement Cisco IOS Resilient...; Question 37: There are two versions of IKE: IKEv1 and IKEv2. Both IKEv1 a...; Question 38: Which technology can be used to rate data fidelity and to pr...; Question 39: What is one requirement for locking a wired or wireless devi...; Question 40: Scenario In this simulation, you have access to ASDM only. R...; Question 41: Which command successfully creates an administrative user wi...; Question 42: Which two options are the primary deployment models for mobi...; Question 43: Which NAT type allows only objects or groups to reference an...; Question 44: Which RADIUS server authentication protocols are supported o...; Question 45: Which statement about application blocking is true?...; Question 46: Which feature prevents loops by moving a nontrunking port in...; Question 47: Which statement about personal firewalls is true?...; Question 48: What is the maximum number of methods that a single method l...; Question 49: Which command do you enter to enable authentication for OSPF...; Question 50: When setting up a site-to-site VPN with PSK authentication o...; Question 51: Which two types of VLANs using PVLANs are valid? (Choose two...; Question 52: Which product can be used to provide application layer prote...; Question 53: Which of the following are features of IPsec transport mode?...; Question 54: Which two characteristics of a PVLAN are true? (Choose two.)...; Question 55: Which command do you enter to verify the status and settings...; Question 56: Which two SNMPv3 services support its capabilities as a secu...; Question 57: When an administrator initiates a device wipe command from t...; Question 58: What mechanism does asymmetric cryptography use to secure da...; Question 59: Refer to the exhibit. (Exhibit) How many times was a read-on...; Question 60: Which EAP method authenticates a client against Active Direc...; Question 61: How does a zone-based firewall implementation handle traffic...; Question 62: Which IPSec mode is used to encrypt traffic directly between...; Question 63: Which technology could be used on top of an MPLS VPN to add ...; Question 64: Which statement about an ASA in transparent mode is true?...; Question 65: Which protocol provides security to Secure Copy?...; Question 66: Which alert protocol is used with Cisco IPS Manager Express ...; Question 67: Which type of mirroring does SPAN technology perform?...; Question 68: Which firewall configuration must you perform to allow traff...; Question 69: What configuration allows AnyConnect to automatically establ...; Question 70: Which two attack types can be prevented with the implementat...; Question 71: Which network device does NTP authenticate?...; Question 72: Which option is the default value for the Diffie-Hellman gro...; Question 73: Which Cisco Security Manager application collects informatio...; Question 74: Which two statements about Telnet access to the ASA are true...; Question 75: What is the default timeout interval during which a router w...; Question 76: Which two configurations can prevent VLAN hopping attack fro...; Question 77: What are two challenges of using a network-based IPS? (Choos...; Question 78: What is a possible reason for the error message?Router(confi...; Question 79: What is an advantage of split tunneling?...; Question 80: What VPN feature allows traffic to exit the security applian...; Question 81: Which feature can help a router or switch maintain packet fo...; Question 82: Scenario In this simulation, you have access to ASDM only. R...; Question 83: Which technology can you implement to centrally mitigate pot...; Question 84: What does the DH group refer to?...; Question 85: Which type of IPS can identify worms that are propagating in...; Question 86: In which two situations should you use out-of-band managemen...; Question 87: Which two actions can a zone-based firewall take when lookin...; Question 88: Which accounting notices are used to send a failed authentic...; Question 89: Which IPS detection method examines network traffic for prec...; Question 90: Which command do you enter to verify the Phase 1 status of a...; Question 91: What are two advanced features of the Cisco AMP solution for...; Question 92: Which Sourcefire event action should you choose if you want ...; Question 93: Which attack involves large numbers of ICMP packets with a s...; Question 94: If a switch receives a superior BPDU and goes directly into ...; Question 95: Which type of encryption technology has the broadest platfor...; Question 96: What are two direct-to-tower methods for redirecting web tra...; Question 97: In which type of attack does the attacker attempt to overloa...; Question 98: If you change the native VLAN on the trunk port to an unused...; Question 99: Which statement provides the best definition of malware?...; Question 100: Which two 802.1x features can you enable by running the IOS ...; Question 101: Which source port does IKE use when NAT has been detected be...; Question 102: What is the effect of the send-lifetime local 23:59:00 31 De...; Question 103: Which wildcard mask is associated with a subnet mask of /27?...; Question 104: When using the Adaptive Security Device Manager (ASDM), whic...; Question 105: What is a potential drawback to leaving VLAN 1 as the native...; Question 106: Which two statements about stateless firewalls are true? (Ch...; Question 107: Which three ESP fields can be encrypted during transmission?...; Question 108: Which two are the default settings for port security? (Choos...; Question 109: A data breach has occurred and your company database has bee...; Question 110: Which two models of ASA tend to be used in a data center? (C...; Question 111: How can you detect a false negative on an IPS?...; Question 112: Which command initializes a lawful intercept view?...; Question 113: Refer to the exhibit. (Exhibit) Which area represents the da...; Question 114: Which statement represents a difference between an access li...; Question 115: What is the transition order of STP states on a Layer 2 swit...; Question 116: Which two are characteristics of RADIUS? (Choose two.)...; Question 117: What improvement does EAP-FASTv2 provide over EAP-FAST?...; Question 118: What are two default behaviors of the traffic on a zone-base...; Question 119: Which IOS command do you enter to test authentication agains...; Question 120: Which statement correctly describes the function of a privat...; Question 121: Which two actions can a zone-based firewall apply to a packe...; Question 122: In which form of fraud does an attacker try to learn informa...; Question 123: Which command verifies phase 1 of an IPsec VPN on a Cisco ro...; Question 124: What are two uses of SIEM software? (Choose two.)...; Question 125: Which command will configure a Cisco ASA firewall to authent...; Question 126: What type of packet creates and performs network operations ...; Question 127: What is true about the Cisco IOS Resilient Configuration fea...; Question 128: How can you prevent NAT rules from sending traffic to incorr...; Question 129: What are two challenges when deploying host-level IPS? (Choo...; Question 130: What VPN feature allows Internet traffic and local LAN/WAN t...; Question 131: Which type of malicious software can create a back-door into...; Question 132: Which security measures can protect the control plane of a C...; Question 133: What are the primary attack methods of VLAN hopping? (Choose...; Question 134: Which network topology describes multiple LANs in a geograph...; Question 135: What is a limitation of network-based IPS?...; Question 136: What is the effect of the ip scp server enable command?...; Question 137: Which three descriptions of RADIUS are true? (Choose three.)...; Question 138: Which Cisco feature can help mitigate spoofing attacks by ve...; Question 139: For what reason would you configure multiple security contex...; Question 140: Which statement about the native VLAN is true?...; Question 141: Which command is needed to enable SSH support on a Cisco Rou...; Question 142: Which TACACS+ server-authentication protocols are supported ...; Question 143: What type of attack was the Stuxnet virus?...; Question 144: If a packet matches more than one class map in an individual...; Question 145: Which IDS/IPS solution can monitor system processes and reso...; Question 146: Which type of address translation should be used when a Cisc...; Question 147: What are two features of transparent firewall mode? (Choose ...; Question 148: Refer to the exhibit. (Exhibit) The Admin user is unable to ...; Question 149: Refer to the exhibit. What is the effect of the given config...; Question 150: Which two characteristics of an application layer firewall a...; Question 151: What is the purpose of the Integrity component of the CIA tr...; Question 152: What is an advantage of placing an IPS on the inside of a ne...; Question 153: Which type of attack can exploit design flaws in the impleme...; Question 154: Which two primary security concerns can you mitigate with a ...; Question 155: Which type of security control is defense in depth?...; Question 156: Which two are considered basic security principles? (Choose ...; Question 157: Which command should be used to enable AAA authentication to...; Question 158: Which feature allows a dynamic PAT pool to select the next a...; Question 159: In which configuration mode do you configure the ip ospf aut...; Question 160: What can the SMTP preprocessor in FirePOWER normalize?...; Question 161: What is the FirePOWER impact flag used for?...; Question 162: Which address block is reserved for locally assigned unique ...; Question 163: Why does ISE require its own certificate issued by a trusted...; Question 164: Which actions can a promiscuous IPS take to mitigate an atta...; Question 165: You have implemented a Sourcefire IPS and configured it to b...; Question 166: After reloading a router, you issue the dir command to verif...; Question 167: How can FirePOWER block malicious email attachments?...; Question 168: Which two advantages does the on-premise model for MDM deplo...; Question 169: Which action does standard antivirus software perform as par...; Question 170: Which sensor mode can deny attackers inline?...; Question 171: What three actions are limitations when running IPS in promi...; Question 172: How can you protect CDP from reconnaissance attacks?...; Question 173: Which countermeasures can mitigate ARP spoofing attacks? (Ch...; Question 174: Refer to the exhibit. (Exhibit) If a supplicant supplies inc...; Question 175: What hash type does Cisco use to validate the integrity of d...; Question 176: What is the best way to confirm that AAA authentication is w...; Question 177: Refer to the exhibit. (Exhibit) While troubleshooting site-t...; Question 178: In the router ospf 200 command, what does the value 200 stan...; Question 179: Which feature of the Cisco Email Security Appliance can miti...; Question 180: Which type of social-engineering attack uses normal telephon...

[×]

Download PDF File

Enter your email address to download Cisco.210-260.v2019-08-06.q180.pdf

Email:

Disclaimer:
Freecram doesn't offer Real GIAC Exam Questions. Freecram doesn't offer Real SAP Exam Questions. Freecram doesn't offer Real (ISC)² Exam Questions. Freecram doesn't offer Real CompTIA Exam Questions. Freecram doesn't offer Real Microsoft Exam Questions.
Oracle and Java are registered trademarks of Oracle and/or its affiliates.
Freecram material do not contain actual actual Oracle Exam Questions or material.
Microsoft®, Azure®, Windows®, Windows Vista®, and the Windows logo are registered trademarks of Microsoft Corporation.
Freecram Materials do not contain actual questions and answers from Cisco's Certification Exams. The brand Cisco is a registered trademark of CISCO, Inc.
CFA Institute does not endorse, promote or warrant the accuracy or quality of these questions. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Freecram does not offer exam dumps or questions from actual exams. We offer learning material and practice tests created by subject matter experts to assist and help learners prepare for those exams. All certification brands used on the website are owned by the respective brand owners. Freecram does not own or claim any ownership on any of the brands.

Question 164/180

LEAVE A REPLY

Download PDF File