Cisco CCNA Security 210-260 Practice Test Questions

1. Pass your Cisco CCNA Security 210-260 Exam With Testmayor Cisco CCNA Security 210-260 Practice Test w w w. t e s t m a y o r. c o m

2. The Cisco Implementing Cisco Network Security Routing and Switching written exam validate that professionals have the expertise to: configure, validate, and troubleshoot complex enterprise network infrastructure; understand how infrastructure components interoperate; and translate functional requirements into specific device configurations. Content By Cisco.com

3. h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

4. Question No 1: What type of packet creates and performs network operations on a network device? A. control plane packets B. data plane packets C. management plane packets D. services plane packets Answer: A h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

5. Question No 2: What is an advantage of implementing a Trusted Platform Module for disk encryption? A. It provides hardware authentication. B. It allows the hard disk to be transferred to another device without requiring re- encryption.dis C. It supports a more complex encryption algorithm than other disk-encryption technologies. D. It can protect against single points of failure. Answer: A h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

6. Question No 3: In what type of attack does an attacker virtually change a device's burned-in address in an attempt to circumvent access lists and mask the device's true identity? A. gratuitous ARP B. ARP poisoning C. IP spoofing D. MAC spoofing Answer: D h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

7. Question No 4: What is the effect of the send-lifetime local 23:59:00 31 December 31 2013 infinite command? A. It configures the device to begin transmitting the authentication key to other devices at 00:00:00 local time on January 1, 2014 and continue using the key indefinitely. B. It configures the device to begin transmitting the authentication key to other devices at 23:59:00 local time on December 31, 2013 and continue using the key indefinitely. C. It configures the device to begin accepting the authentication key from other devices immediately and stop accepting the key at 23:59:00 local time on December 31, 2013. D. It configures the device to generate a new authentication key and transmit it to other devices at 23:59:00 local time on December 31, 2013. E. It configures the device to begin accepting the authentication key from other devices at 23:59:00 local time on December 31, 2013 and continue accepting the key indefinitely. F. It configures the device to begin accepting the authentication key from other devices at 00:00:00 local time on G. January 1, 2014 and continue accepting the key indefinitely. Answer: B

8. Question No 5: What type of algorithm uses the same key to encrypt and decrypt data? A. a symmetric algorithm B. an asymmetric algorithm C. a Public Key Infrastructure algorithm D. an IP security algorithm Answer: A h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

9. Question no 6: What type of security support is provided by the Open Web Application Security Project? A. Education about common Web site vulnerabilities. B. A Web site security framework. C. A security discussion forum for Web site developers. D. Answer: A Scoring of common vulnerabilities and exposures. h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

10. Question No 7: What is one requirement for locking a wired or wireless device from ISE? A. The ISE agent must be installed on the device. B. The device must be connected to the network when the lock command is executed. C. The user must approve the locking action. D. The organization must implement an acceptable use policy allowing device locking. Answer: A h t t p s : / / w w w. t e s t m a y o r. c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

11. Question No 8: What is the FirePOWER impact flag used for? A. A value that indicates the potential severity of an attack. B. A value that the administrator assigns to each signature. C. A value that sets the priority of a signature. D. A value that measures the application awareness. Answer: A h t t p s : / / w w w . t e s t m a y o r . c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

12. Question No 9: What mechanism does asymmetric cryptography use to secure data? A. a public/private key pair B. shared secret keys C. an RSA nonce D. an MD5 hash Answer: A

13. Question No 10: Which statement about IOS privilege levels is true? A. Each privilege level supports the commands at its own level and all levels below it. B. Each privilege level supports the commands at its own level and all levels above it. C. Privilege-level commands are set explicitly for each user. D. Each privilege level is independent of all other privilege levels. Answer: A h t t p s : / / w w w . t e s t m a y o r . c o m / 2 1 0 - 2 6 0 - t e s t . h t m l

14. Why Choose US Thinking to achieve Cisco CCNA Security certification? Testmayor is the best preparation approach for Cisco CCNA Security certification candidates. Our Cisco 210-260 Exam Questions Answers and exam engine are incredibly addictive, as once a certification candidate experiences he/she can't go for any other study resource. They are actually very effective to use for these reasons: 1. All 210-260 Practice Test Questions are latest and verified by IT experts. 2. Cisco 210-260 Real Exam Questions are available in PDF file and Exam engine formats. 3. Cisco 210-260 exam engine is easy to use. 4. Learning and practicing online test make your preparation 100% effective. 5. All Practice Exam Questions are available with 3 months free updates. 6. Free demo of any Cisco Questions and Answers can be furnished on demand.