Online Access Free 210-260 Exam Questions

Which statement about extended access lists is true?

• A.Extended access lists perform filtering that is based on source and destination and are most effective when applied to the destination
• B.Extended access lists perform filtering that is based on destination and are most effective when applied to the source
• C.Extended access lists perform filtering that is based on source and are most effective when applied to the destination
• D.Extended access lists perform filtering that is based on source and destination and are most effective when applied to the source

Which two configurations can prevent VLAN hopping attack from attackers at VLAN10? (Choose two.)

• A.using switchport mode access command on all host ports
• B.using switchport trunk native vlan 10
• C.using switchport nonegotiate
• D.creating VLAN 99 and using command on trunk ports
• E.enabling BPDU guard on all access ports
• F.applying ACL between VLANs

What is the most common implementation of PAT in a standard networked environment?

• A.configuring an any any rule to enable external hosts to communicate inside the network.
• B.configuring multiple internal hosts to communicate outside of the network using the outside interface IP address
• C.configuring multiple internal hosts to communicate outside of the network by using the inside interface IP address
• D.configuring multiple external hosts to join the self zone and to communicate with one another

Which FirePOWER preprocessor engine is used to prevent SYN attacks?

• A.Inline Normalization
• B.Rate-Based Prevention
• C.IP Defragmentation
• D.Portscan Detection

Which command do you enter to verify the Phase 1 status of a VPN connection?

• A.sh crypto ipsec sa
• B.debug crypto isakmp
• C.sh crypto session
• D.sh crypto isakmp sa