[PDF&VCE] Lead2pass Latest Cisco 210-260 Exam Questions Free Downloading (31-40)
2016 September Cisco Official New Released 210-260 Dumps in Lead2pass.com! 100% Free Download! 100% Pass Guaranteed! 2016 latest released Cisco official 210-260 exam question free download from Lead2pass! All new updated questions and answers are real questions from Cisco Exam Center! Following questions and answers are all new published by Cisco Official Exam Center: http://www.lead2pass.com/210-260.html 3 1 QUESTION 31
A clientless SSL VPN user who is connecting on a Windows Vista computer is missing the menu option for Remote Desktop Protocol on the portal web page.
Which action should you take to begin troubleshooting? A. Ensure that the RDP2 plug-in is installed on the VPN gateway
B. Reboot the VPN gateway
C. Instruct the user to reconnect to the VPN gateway
D. Ensure that the RDP plug-in is installed on the VPN gateway Answer: D QUESTION 32
Which security zone is automatically defined by the system? A. The source zone
B. The self zone
C. The destination zone
D. The inside zone Answer: B QUESTION 33
What are purposes of the Internet Key Exchange in an IPsec VPN? (Choose two.) A. The Internet Key Exchange protocol establishes security associations
B. The Internet Key Exchange protocol provides data confidentiality
C. The Internet Key Exchange protocol provides replay detection
D. The Internet Key Exchange protocol is responsible for mutual authentication Answer: Answer: AD QUESTION 34
Which address block is reserved for locally assigned unique local addresses? A. 2002::/16
B. FD00::/8
C. 2001::/32
D. FB00::/8 Answer: B QUESTION 35
What is a possible reason for the error message?
Router(config)#aaa server?% Unrecognized command A. The command syntax requires a space after the word "server"
B. The command is invalid on the target device
C. The router is already running the latest operating system
D. The router is a new device on which the aaa new-model command must be applied before continuing Answer: D QUESTION 36
Which statements about smart tunnels on a Cisco firewall are true? (Choose two.) A. Smart tunnels can be used by clients that do not have administrator privileges
B. Smart tunnels support all operating systems
C. Smart tunnels offer better performance than port forwarding
D. Smart tunnels require the client to have the application installed locally Answer: AD
Explanation:
Smart Tunnel is also used to provide remote access to web applications that are difficult to rewrite, such as proprietary, non-standards-based Java, Java Script, or Flash animations.
Smart Tunnel also supports Single Sign-On to web applications that require either form-based POST parameters, http basic, FTP, or NTLM authentication
Smart Tunnel can also co-exist with a Full-Tunnel VPN Client. For example, an employee can connect to the company network by using Full-Tunnel VPN Client, while simultaneously connecting to a vendor network by using Smart Tunnel.
Smart Tunnel Advantages over Port-Forwarding, Plug-ins
Smart Tunnel offers better performance than browser plug-ins.
Port forwarding is the legacy technology for supporting TCP-based applications over a Clientless SSL VPN connection. Unlike port forwarding, Smart Tunnel simplifies the user experience by not requiring the user connection of the local application to the local port.
Smart Tunnel does not require users to have administrator privileges.
Smart Tunnel does not require the administrator to know application port numbers in advance. QUESTION 37
Which option describes information that must be considered when you apply an access list to a physical interface? A. Protocol used for filtering
B. Direction of the access class
C. Direction of the access group
D. Direction of the access list Answer: C QUESTION 38
Which source port does IKE use when NAT has been detected between two VPN gateways? A. TCP 4500
B. TCP 500
C. UDP 4500
D. UDP 500 Answer: C QUESTION 39
Which of the following are features of IPsec transport mode? (Choose three.) A. IPsec transport mode is used between end stations
B. IPsec transport mode is used between gateways
C. IPsec transport mode supports multicast
D. IPsec transport mode supports unicast
E. IPsec transport mode encrypts only the payload
F. IPsec transport mode encrypts the entire packet Answer: ADE
Explanation:
IPSec Transport Mode
IPSec Transport mode is used for end-to-end communications, for example, for communication between a client and a server or between a workstation and a gateway (if the gateway is being treated as a host). A good example would be an encrypted Telnet or Remote Desktop session from a workstation to a server.
Transport mode provides the protection of our data, also known as IP Payload, and consists of TCP/UDP header + Data, through an AH or ESP header. The payload is encapsulated by the IPSec headers and trailers. The original IP headers remain intact, except that the IP protocol field is changed to ESP (50) or AH (51), and the original protocol value is saved in the IPsec trailer to be restored when the packet is decrypted.
IPSec transport mode is usually used when another tunneling protocol (like GRE) is used to first encapsulate the IP data packet, then IPSec is used to protect the GRE tunnel packets. IPSec protects the GRE tunnel traffic in transport mode. QUESTION 40
Which command causes a Layer 2 switch interface to operate as a Layer 3 interface? A. no switchport nonnegotiate
B. switchport
C. no switchport mode dynamic auto
D. no switchport Answer: D
Lead2pass offers the latest Cisco 210-260 exam questions and answers in PDF & VCE. We promise 100% 210-260 exam pass or full money back (Have a try- If success, you will get a high pay job! Failed, nothing, money back!)! We provide instant download of our 210-260 dumps after payment so you can study earlier than others!
210-260 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDLWhBVC0zekJKUUU 2 2016 Cisco 210-260 exam dumps (All 193 Q&As) from Lead2pass: http://www.lead2pass.com/210-260.html 3 1 [100% Exam Pass Guaranteed]
|
