Valid 210-260 Dumps shared by EduDump.com for Helping Passing 210-260 Exam! EduDump.com now offer the newest 210-260 exam dumps, the EduDump.com 210-260 exam questions have been updated and answers have been corrected get the newest EduDump.com 210-260 dumps with Test Engine here:
Access 210-260 Dumps Premium Version
(515 Q&As Dumps, 35%OFF Special Discount Code: freecram)
<< Prev Question Next Question >>
Question 29/100
How does the Cisco ASA use Active Directory to authorize VPN users?
Correct Answer: A
Explanation
When ASA needs to authenticate a user to the configured LDAP server, it first tries to login using the login
DN provided. After successful login to the LDAP server, ASA sends a search query for the username provided
by the VPN user. This search query is created based on the naming attribute provided in the configuration.
LDAP replies to the query with the complete DN of the user. At this stage ASA sends a second login attempt
to the LDAP server. In this attempt, ASA tries to login to the LDAP server using the VPN user's full DN and
password provided by the user. A successful login to the LDAP server will indicate that the credentials
provided by the VPN user are correct and the tunnel negotiation will move to the Phase 2.
Source:
http://www.networkworld.com/article/2228531/cisco-subnet/using-your-active-directory-for-vpn-
authentication-on-asa.html
When ASA needs to authenticate a user to the configured LDAP server, it first tries to login using the login
DN provided. After successful login to the LDAP server, ASA sends a search query for the username provided
by the VPN user. This search query is created based on the naming attribute provided in the configuration.
LDAP replies to the query with the complete DN of the user. At this stage ASA sends a second login attempt
to the LDAP server. In this attempt, ASA tries to login to the LDAP server using the VPN user's full DN and
password provided by the user. A successful login to the LDAP server will indicate that the credentials
provided by the VPN user are correct and the tunnel negotiation will move to the Phase 2.
Source:
http://www.networkworld.com/article/2228531/cisco-subnet/using-your-active-directory-for-vpn-
authentication-on-asa.html
- Question List (100q)
- Question 1: In which two situations should you use in band management? (...
- Question 2: Which technology can block a non-malicious program that is r...
- Question 3: What type of attack was the Stuxnet virus?...
- Question 4: Which countermeasures can mitigate ARP spoofing attacks? (Ch...
- Question 5: What IPSec mode is used to encrypt traffic between a server ...
- Question 6: Refer to the exhibit. (Exhibit) What is the effect of the gi...
- Question 7: If a packet matches more than one class map in an individual...
- Question 8: What are the two characteristics of IPS?...
- Question 9: Which two features are commonly used by CoPP and CPPr to pro...
- Question 10: Which technology could be used on top of an MPLS VPN to add ...
- Question 11: By which kind of threat is the victim tricked into entering ...
- Question 12: How can you proect CDP from reconnaissance attacks?...
- Question 13: Which accounting notices are used to send a failed authentic...
- Question 14: Which two characteristics apply to an Intrusion Prevention S...
- Question 15: Which tool can an attacker use to attempt a DDoS attack?...
- Question 16: Refer to the exhibit. (Exhibit) With which NTP server has th...
- Question 17: Which type of PVLAN port allows communication from all port ...
- Question 18: Which security measures can protect the control plane of a C...
- Question 19: What are the primary attack methods of VLAN hopping? (Choose...
- Question 20: Which statement about traffic inspection using the Cisco Mod...
- Question 21: Given the new additional connectivity requirements and the t...
- Question 22: Which Cisco feature can help mitigate spoofing attacks by ve...
- Question 23: In the router ospf 200 command, what does the value 200 stan...
- Question 24: Which internet Multihoming solution is a resistant to a fail...
- Question 25: In which type of attack does the attacker attempt to overloa...
- Question 26: When Cisco IOS zone-based policy firewall is configured, whi...
- Question 27: In which two models can the Cisco Web Security Appliance be ...
- Question 28: Which two characteristics of symmetric encryption are true? ...
- Question 29: How does the Cisco ASA use Active Directory to authorize VPN...
- Question 30: Which primary security attributes can be achieved by BYOD Ar...
- Question 31: Which two statements about Telnet access to the ASA are true...
- Question 32: In which form of fraud does an attacker try to team informat...
- Question 33: What configuration allows AnyConnect to automatically establ...
- Question 34: How can you protect CDP from reconnaissance attacks?...
- Question 35: Which FirePOWER preprocessor engine is used to prevent SYN a...
- Question 36: What is the main purpose of Control Plane Policing?...
- Question 37: What is the effect of the ip scp server enable command?...
- Question 38: Refer to the exhibit. (Exhibit) What is the effect of the gi...
- Question 39: Which IOS command do you enter to test authentication agains...
- Question 40: Which two actions can an end user take to manage a lost or s...
- Question 41: Which protocol offers data integrity, encryption, authentica...
- Question 42: Which two options are Private-VLAN secondary VLAN types?...
- Question 43: Which type of social engineering attack targets top executiv...
- Question 44: Which two types of malware can self-replica and spread?...
- Question 45: Which IPS detection method can you use to detect attacks tha...
- Question 46: Which statement about Cisco ACS authentication and authoriza...
- Question 47: Which option is a key security component of an MDM deploymen...
- Question 48: In which two modes can the Cisco Web Security Appliance be d...
- Question 49: In a Cisco Cloud Web Security environment, when can network ...
- Question 50: Which statement about IOS privilege levels is true?...
- Question 51: What is a valid implicit permit rule for traffic that is tra...
- Question 52: Which two 802.1x features can you enable by running the IOS ...
- Question 53: Which Auto NAT policies are processed first ?...
- Question 54: What is the best definition of hairpinning?...
- Question 55: Which effect of the secure boot-image command is true?...
- Question 56: When a company puts a security policy in place, what is the ...
- Question 57: Which command is needed to enable SSH support on a Cisco Rou...
- Question 58: In which stage of an attack does the attacker discover devic...
- Question 59: In which two situations should you use out-of-band managemen...
- Question 60: Which three statements about host-based IPS are true? (Choos...
- Question 61: Refer to the exhibit. (Exhibit) Which statement about this o...
- Question 62: Which statement about NAT table evaluation in the ASA is tru...
- Question 63: Which option is a weakness in an information system that an ...
- Question 64: In a security context, which action can you take to address ...
- Question 65: If a personal Firewall specifically blocks NTP, which type o...
- Question 66: Which Cisco Security Manager application collects informatio...
- Question 67: What are two challenges of using a network-based IPS? (Choos...
- Question 68: What protocol provides CIA ?
- Question 69: With Cisco IOS zone-based policy firewall, by default, which...
- Question 70: When you edit an IPS sub signature, what is the effect on th...
- Question 71: What can cause the state table of a stateful firewall to upd...
- Question 72: What are two uses of SIEM software? (Choose two.)...
- Question 73: Which IPSec mode is used to encrypt traffic directly between...
- Question 74: Which statement about TACACS+ is true?...
- Question 75: (Choose Two)
- Question 76: Which statement correctly describes the function of a privat...
- Question 77: Which component offers a variety of security solutions, incl...
- Question 78: Which command do you enter to verify the status and settings...
- Question 79: Which type of mirroring does SPAN technology perform?...
- Question 80: Which technology can best protect data at rest on a user sys...
- Question 81: Which label is given to a person who uses existing computer ...
- Question 82: Which command can you enter to configure OSPF to use hashing...
- Question 83: Refer to the exhibit. (Exhibit) A network security administr...
- Question 84: What are the three layers of a hierarchical network design? ...
- Question 85: If a router configuration includes the line aaa authenticati...
- Question 86: Which is a key security component of MDM deployment?...
- Question 87: Which two are characteristics of RADIUS? (Choose two.)...
- Question 88: Scenario In this simulation, you have access to ASDM only. R...
- Question 89: Which type of malicious software can create a back-door into...
- Question 90: Which command successfully creates an administrative user wi...
- Question 91: How does PEAP protect the EAP exchange?...
- Question 92: With which preprocesor do you detect incomplete TCP handshak...
- Question 93: Which options are filtering options used to display SDEE mes...
- Question 94: Which statement about college campus is true?...
- Question 95: Which term refer to the electromagnetic interference that ca...
- Question 96: What is the actual IOS privilege level of User Exec mode?...
- Question 97: What is the highest security level can be applied to an ASA ...
- Question 98: Which of the following are IKE modes? (choose all and apply)...
- Question 99: Which description of the use of a private key is true?...
- Question 100: Refer to the exhibit. (Exhibit) For which reason is the tunn...
