Cisco 210-260 Exam Questions – Latest 2018

Different learning methods of Cisco Certified Network Associate Security 210-260 exam are used in the software to ease the candidates learning of difficult concepts and they are facilitated for learning Cisco Implementing Cisco Network Security 210-260 exam with the simulated real Certified Cisco 210-260 exam scenarios so that you can practice in the same situation that you are going to face in the real exam. Cisco Network Security 210-260 exam Practice test software evaluates the performance by using self-assessment and report feature.

♥ VALID 210-260 Exam Questions 2018 ♥

210-260 exam questions, 210-260 PDF dumps; 210-260 exam dumps:: https://www.dumpsschool.com/210-260-exam-dumps.html (296 Q&A) (New Questions Are 100% Available! Also Free Practice Test Software!)

Latest Cisco 210-260 Dumps Exam Questions and Answers:

Version: 22.0
Question: 21

If a switch port goes into a blocked state only when a superior BPDU is received, what mechanism must be in use?

A. STP root guard
B. EtherChannel guard
C. loop guard
D. STP BPDU guard

Answer: A

Root guard allows the device to participate in STP as long as the device does not try to become the root. If root guard blocks the port, subsequent recovery is automatic. Recovery occurs as soon as the offending device ceases to send superior BPDUs.
Source: http://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10588-74.html

Question: 22

Which statement about a PVLAN isolated port configured on a switch is true?

A. The isolated port can communicate only with the promiscuous port.
B. The isolated port can communicate with other isolated ports and the promiscuous port.
C. The isolated port can communicate only with community ports.
D. The isolated port can communicate only with other isolated ports.

Answer: A

Question: 23

In which three ways does the TACACS protocol differ from RADIUS? (Choose three.)

A. TACACS uses TCP to communicate with the NAS.
B. TACACS can encrypt the entire packet that is sent to the NAS.
C. TACACS supports per-command authorization.
D. TACACS authenticates and authorizes simultaneously, causing fewer packets to be transmitted.
E. TACACS uses UDP to communicate with the NAS.
F. TACACS encrypts only the password field in an authentication packet.

Answer: A,B,C

Question: 24

According to Cisco best practices, which three protocols should the default ACL allow on an access port to enable wired BYOD devices to supply valid credentials and connect to the network? (Choose three.)

A. BOOTP
B. TFTP
C. DNS
D. MAB
E. HTTP
F. 802.1x

Answer: A,B,C

Question: 25

Which two next-generation encryption algorithms does Cisco recommend? (Choose two.)

A. AES
B. 3DES
C. DES
D. MD5
E. DH-1024
F. SHA-384

Answer: A,F

Question: 26

Which three ESP fields can be encrypted during transmission? (Choose three.)

A. Security Parameter Index
B. Sequence Number
C. MAC Address
D. Padding
E. Pad Length
F. Next Header

Answer: D,E,F

New Updated 210-260 Exam Questions 210-260 PDF dumps 210-260 practice exam dumps: https://www.dumpsschool.com/210-260-exam-dumps.html