210-260 Implementing Cisco Network Security-converted Exam

Sample Questions:

Q) Which two services define cloud networks? (Choose two.)

A. Infrastructure as a Service

B. Platform as a Service

C. Security as a Service

D. Compute as a Service

E. Tenancy as a Service

Q) In which two situations should you use out-of-band management? (Choose two.)

A. when a network device fails to forward packets

B. when you require ROMMON access

C. when management applications need concurrent access to the device

D. when you require administrator access from multiple locations

E. when the control plane fails to respond

Q) In which three ways does the TACACS protocol differ from RADIUS? (Choose three.)

A. TACACS uses TCP to communicate with the NAS.

B. TACACS can encrypt the entire packet that is sent to the NAS.

C. TACACS supports per-command authorization.

D. TACACS authenticates and authorizes simultaneously, causing fewer packets to be transmitted.

E. TACACS uses UDP to communicate with the NAS.

F. TACACS encrypts only the password field in an authentication packet.

Q) According to Cisco best practices, which three protocols should the default ACL allow on an access port to enable wired BYOD devices to supply valid credentials and connect to the network? (Choose three.)

A. BOOTP

B. TFTP

C. DNS

D. MAB

E. HTTP

F. 802.1x

Q) Which two next-generation encryption algorithms does Cisco recommend? (Choose two.)

A. AES

B. 3DES

C. DES

D. MD5

E. DH-1024

F. SHA-384

Q) Which three ESP fields can be encrypted during transmission? (Choose three.)

A. Security Parameter Index

B. Sequence Number

C. MAC Address

D. Padding

E. Pad Length

F. Next Header