Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:
Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 51/102
What features can protect the data plane? (Choose three.)
Correct Answer: B,D,F
+ Block unwanted traffic at the router. If your corporate policy does not allow TFTP traffic, just implement ACLs that deny traffic that is not allowed.
+ Reduce spoofing attacks. For example, you can filter (deny) packets trying to enter your network (from the outside) that claim to have a source IP address that is from your internal network.
+ Dynamic Host Configuration Protocol (DHCP) snooping to prevent a rogue DHCP server from handing out incorrect default gateway information and to protect a DHCP server from a starvation attack Source: Cisco Official Certification Guide, Best Practices for Protecting the Data Plane , p.271
+ Reduce spoofing attacks. For example, you can filter (deny) packets trying to enter your network (from the outside) that claim to have a source IP address that is from your internal network.
+ Dynamic Host Configuration Protocol (DHCP) snooping to prevent a rogue DHCP server from handing out incorrect default gateway information and to protect a DHCP server from a starvation attack Source: Cisco Official Certification Guide, Best Practices for Protecting the Data Plane , p.271
- Question List (102q)
- Question 1: Which two descriptions of TACACS+ are true? (Choose two.)...
- Question 2: In which two situations should you use out-of-band managemen...
- Question 3: What type of packet creates and performs network operations ...
- Question 4: Which three statements are characteristics of DHCP Spoofing?...
- Question 5: Which security term refers to a person, property, or data of...
- Question 6: Which two primary security concerns can you mitigate with a ...
- Question 7: Which command causes a Layer 2 switch interface to operate a...
- Question 8: In which three ways does the TACACS protocol differ from RAD...
- Question 9: If a packet matches more than one class map in an individual...
- Question 10: Refer to the below. (Exhibit) Which statement about this deb...
- Question 11: What show command can see vpn tunnel establish with traffic ...
- Question 12: Which address block is reserved for locally assigned unique ...
- Question 13: Which primary security attributes can be achieved by BYOD Ar...
- Question 14: Refer to the exhibit. (Exhibit) What type of firewall would ...
- Question 15: Which two statements about hardware-based encryption are tru...
- Question 16: # nat (inside,outside) dynamic interface Refer to the above....
- Question 17: In which form of fraud does an attacker try to team informat...
- Question 18: Which description of the nonsecret numbers that are used to ...
- Question 19: Which ports must be open between a AAA server and a Microsof...
- Question 20: What are two ways to prevent eavesdropping when you perform ...
- Question 21: Which next-generation encryption algorithm supports four var...
- Question 22: How does the transparent firewall process traffic through th...
- Question 23: Which command is to make sure that AAA Authentication is con...
- Question 24: Drag the recommendations on the left to the Cryptographic Al...
- Question 25: What are two reasons to recommend SNMPv3 over SNMPv2? (Choos...
- Question 26: How does a device on a network using ISE receive its digital...
- Question 27: What are purposes of the Internet Key Exchange in an IPsec V...
- Question 28: Which network topology describes multiple LANs in a geograph...
- Question 29: On which Cisco Configuration Professional screen do you enab...
- Question 30: A clientless SSL VPN user who is connecting on a Windows Vis...
- Question 31: Drag and drop the each port-security violation mode from the...
- Question 32: Which of Diffie-Hellman group(s) is/are support(ed) by CISCO...
- Question 33: What are two well-known security terms? (Choose Two)...
- Question 34: Which option is a key security component of an MDM deploymen...
- Question 35: What action must you take on the ISE to blacklist a wired de...
- Question 36: Which two are considered basic security principles? (Choose ...
- Question 37: In which three ways does the RADIUS protocol differ from TAC...
- Question 38: The first layer of defense which provides real-time preventi...
- Question 39: In what type of attack does an attacker virtually change a d...
- Question 40: What command could you implement in the firewall to conceal ...
- Question 41: Which two SNMPv3 services support its capabilities as a secu...
- Question 42: Which two ESA services are available for incoming and outgoi...
- Question 43: What is the transition order of STP states on a Layer 2 swit...
- Question 44: Which feature prevents loops by moving a nontrunking port in...
- Question 45: Which Cisco product can help mitigate web-based attacks with...
- Question 46: Which IOS command is used to define the authentication key f...
- Question 47: Which adverse consequence can occur on a network without BPD...
- Question 48: When is the default deny all policy an exception in zone-bas...
- Question 49: Which statement about application blocking is true?...
- Question 50: When is "Deny all" policy an exception in Zone Based Firewal...
- Question 51: What features can protect the data plane? (Choose three.)...
- Question 52: A data breach has occurred and your company database has bee...
- Question 53: Which attacks can be prevented by OSPF authentication?...
- Question 54: Which command enables port security to use stickly MAC addre...
- Question 55: After reloading a router, you issue the dir command to verif...
- Question 56: Command ip ospf authentication key 1 is implemented in which...
- Question 57: With which type of Layer 2 attack can you intercept traffic ...
- Question 58: Which SNMPv3 security level provides authentication using HM...
- Question 59: What is example of social engineering...
- Question 60: Which protocols use encryption to protect the confidentialit...
- Question 61: Which type of secure connectivity does an extranet provide?...
- Question 62: Which two actions does an IPS perform? (Choose two.)...
- Question 63: In which type of attack does the attacker attempt to overloa...
- Question 64: How many crypto map sets can you apply to a router interface...
- Question 65: What type of firewall can perform deep packet inspection?...
- Question 66: SYN flood attack is a form of ?...
- Question 67: Which of the following commands result in a secure bootset? ...
- Question 68: Which two attack types can be prevented with the implementat...
- Question 69: In which two situations should you use in band management? (...
- Question 70: A specific URL has been identified as containing malware. Wh...
- Question 71: Which two statements about stateless firewalls are true? (Ch...
- Question 72: Refer to the exhibit. (Exhibit) Using a stateful packet fire...
- Question 73: In which two modes can the Cisco Web Security Applicance be ...
- Question 74: Which security term refers to the likelihood that a weakness...
- Question 75: Which Cisco Security Manager application collects informatio...
- Question 76: Which technology can be used to rate data fidelity and to pr...
- Question 77: Which option is the resulting action in a zone-based policy ...
- Question 78: Which of the following are features of IPsec transport mode?...
- Question 79: which will auto-nat process first (the focus is on auto-nat)...
- Question 80: On an ASA, which maps are used to identify traffic?...
- Question 81: Refer to the exhibit. (Exhibit) With which NTP server has th...
- Question 82: What is the range of levels provided by the Privilege comman...
- Question 83: You are the security administrator for a large enterprise ne...
- Question 84: What is a limitation of network-based IPS?...
- Question 85: Which two options are advantages of an application layer fir...
- Question 86: Which statement correctly describes the function of a privat...
- Question 87: What's the technology that you can use to prevent non malici...
- Question 88: Which protocol offers data integrity, encryption, authentica...
- Question 89: What type of attack was the Stuxnet virus?...
- Question 90: Which type of layer 2 attack enables the attacker to interce...
- Question 91: In which type of attack does an attacker send email messages...
- Question 92: Which of the following pairs of statements is true in terms ...
- Question 93: Which technology could be used on top of an MPLS VPN to add ...
- Question 94: What technology can you use to provide data confidentiality,...
- Question 95: Which technology can you implement to centrally mitigate pot...
- Question 96: Which two advantages does the on-premise model for MDM deplo...
- Question 97: Where does ip dhcp snooping trust command use?...
- Question 98: Which two characteristics of an application layer firewall a...
- Question 99: Which type of PVLAN port allows a host in the same VLAN to c...
- Question 100: Which statement about the communication between interfaces o...
- Question 101: Which alert protocol is used with Cisco IPS Manager Express ...
- Question 102: When an administrator initiates a device wipe command from t...
