Q1. Which tool can an attacker use to attempt a DDoS attack? 

A. botnet 

B. Trojan horse 

C. virus 

D. adware 

View Answer

Q2. What is the FirePOWER impact flag used for? Cisco 210-260 : Practice Test 

A. A value that indicates the potential severity of an attack. 

B. A value that the administrator assigns to each signature. 

C. A value that sets the priority of a signature. 

D. A value that measures the application awareness. 

View Answer

Q3. You want to allow all of your company's users to access the Internet without allowing other Web servers to collect the IP addresses of individual users. What two solutions can you use? (Choose two). 

A. Configure a proxy server to hide users' local IP addresses. 

B. Assign unique IP addresses to all users. 

C. Assign the same IP address to all users. 

D. Install a Web content filter to hide users' local IP addresses. 

E. Configure a firewall to use Port Address Translation. 

View Answer

Q4. What type of packet creates and performs network operations on a network device? 

A. control plane packets 

B. data plane packets 

C. management plane packets 

D. services plane packets 

View Answer

Q5. Refer to the exhibit. 

How many times was a read-only string used to attempt a write operation? 

A. 9 

B. 6 

C. 4 

D. 3 

E. 2 

View Answer

Q6. What type of attack was the Stuxnet virus? 

A. cyber warfare 

B. hacktivism 

C. botnet 

D. social engineering 

View Answer

Q7. What command can you use to verify the binding table status? 

A. show ip dhcp snooping database 

B. show ip dhcp snooping binding 

C. show ip dhcp snooping statistics 

D. show ip dhcp pool 

E. show ip dhcp source binding 

F. show ip dhcp snooping 

View Answer

Q8. Which two services define cloud networks? (Choose two.) 

A. Infrastructure as a Service 

B. Platform as a Service 

C. Security as a Service 

D. Compute as a Service 

E. Tenancy as a Service 

View Answer

Q9. What VPN feature allows traffic to exit the security appliance through the same interface it entered? 

A. hairpinning 

B. NAT 

C. NAT traversal 

D. split tunneling 

View Answer

Q10. Refer to the exhibit. 

While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show? 

A. IPSec Phase 2 is established between 10.1.1.1 and 10.1.1.5. 

B. ISAKMP security associations are established between 10.1.1.5 and 10.1.1.1. 

C. IKE version 2 security associations are established between 10.1.1.1 and 10.1.1.5. 

D. IPSec Phase 2 is down due to a mismatch between encrypted and decrypted packets. 

View Answer