210-260 | A Review Of Best Quality 210-260 vce

Question No: 12

Which EAP method uses Protected Access Credentials?

A. EAP-FAST

B. EAP-TLS

C. EAP-PEAP

D. EAP-GTC

Answer: A

Question No: 13

Which three options are common examples of AAA implementation on Cisco routers? (Choose three.)

A. authenticating remote users who are accessing the corporate LAN through IPsec VPN connections

B. authenticating administrator access to the router console port, auxiliary port, and vty ports

C. implementing PKI to authenticate and authorize IPsec VPN peers using digital certificates

D. tracking Cisco NetFlow accounting statistics

E. securing the router by locking down all unused services

F. performing router commands authorization using TACACS+

Answer: A,B,F

Explanation:

http://www.cisco.com/en/US/products/ps6638/products_data_sheet09186a00804fe332.htm l

Need for AAA Services

Security for user access to the network and the ability to dynamically define a user's profile to gain access to network resources has a legacy dating back to asynchronous dial access. AAA network security services provide the primary framework through which a network administrator can set up access control on network points of entry or network access servers, which is usually the function of a router or access server.

Authentication identifies a user; authorization determines what that user can do; and accounting monitors the network usage time for billing purposes.

AAA information is typically stored in an external database or remote server such as RADIUS or TACACS+.

The information can also be stored locally on the access server or router. Remote security servers, such as RADIUS and TACACS+, assign users specific privileges by associating attribute-value (AV) pairs, which define the access rights with the appropriate user. All authorization methods must be defined through AAA.

Question No: 14

What technology can you use to provide data confidentiality, data integrity and data origin authentication on your network?

A. Certificate Authority

B. IKE

C. IPSec

D. Data Encryption Standards

Answer: C

Question No: 15

Which filter uses in Web reputation to prevent from Web Based Attacks? (Choose two)

A. outbreak filter

B. buffer overflow filter

C. bayesian overflow filter

D. web reputation

E. exploit filtering

Answer: A,D

Question No: 16

A data breach has occurred and your company database has been copied. Which security principle has been violated?

A. confidentiality

B. availability

C. access

D. control

Answer: A

Question No: 17

Which three ESP fields can be encrypted during transmission? (Choose three.)

A. Security Parameter Index

B. Sequence Number

C. MAC Address

D. Padding

E. Pad Length

F. Next Header

Answer: D,E,F

Question No: 18

Which option describes information that must be considered when you apply an access list to a physical interface?

A. Protocol used for filtering

B. Direction of the access class

C. Direction of the access group

D. Direction of the access list

Answer: C

Question No: 19

Which type of PVLAN port allows a host in the same VLAN to communicate only with promiscuous hosts?

A. Community host in the PVLAN

B. Isolated host in the PVLAN

C. Promiscuous host in the PVLAN

D. Span for host in the PVLAN

Answer: B

Question No: 20

Which type of mirroring does SPAN technology perform?

A. Remote mirroring over Layer 2

B. Remote mirroring over Layer 3

C. Local mirroring over Layer 2

D. Local mirroring over Layer 3

Answer: C

Question No: 21

Which security measures can protect the control plane of a Cisco router? (Choose two.)

A. CCPr

B. Parser views

C. Access control lists

D. Port security

E. CoPP

Answer: A,E