Cisco 210-260 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 210-260
Exam Name/Title: Implementing Cisco Network Security
Certification Provider: Cisco
Corresponding Certification: CCNA Security

Exam Questions: 515
Updated On: May 30, 2026

Question #46

Refer to the exhibit.

Which ryope if NAT configured on a Cisco ASA?

A. Dynamic PAT

B. Dynamic NAT

C. Identity twice NAT

D. Source identity NAT

Discussion 0

Correct Answer: A Vote an answer

Question #47

Which type of mirroring does SPAN technology perform?

A. Remote mirroring over Layer 2

B. Local mirroring over Layer 2

C. Remote mirroring over Layer 3

D. Local mirroring over Layer 3

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #48

When connecting to an external resource, you must change a source IP address to use one IP address from a range of 207.165.201.1 to 207.165.201.30 Which option do you implement?

A. static destination NAT that uses a subnet as a real destination

B. static destination NAT that uses a subnet as a real source

C. dynamic source NAT that uses an IP address as a mapped source

D. dynamic source NAT that uses a range as a mapped source

Discussion 0

Correct Answer: D Vote an answer

Question #49

Which IOS command is used to define the authentication key for NTP?

A. Switch(config)#ntp trusted-key 1

B. Switch(config)#ntp authentication-key 1 md5 C1sc0

C. Switch(config)#ntp source 192.168.0.1

D. Switch(config)#ntp authenticate

Discussion 0

Correct Answer: B Vote an answer

Question #50

What type of attack was the Stuxnet virus?

A. social engineering

B. cyber warfare

C. hacktivism

D. botnet

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #51

Which two features are commonly used by CoPP and CPPr to protect the control plane?

A. class maps

B. policy maps

C. QoS

D. access lists

E. Cisco Express Forwarding

F. traffic classification

Discussion 0

Correct Answer: C,F Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #52

Which option is a characteristic of the RADIUS protocol?

A. combines authentication and authorization in one process

B. uses TCP

C. supports bi-directional challenge

D. offers multiprotocol support

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #53

You have implemented a Sourcefire IPS and configured it to block certain addresses utilizing Security Intelligence IP Address Reputation. A user calls and is not able to access a certain IP address. What action can you take to allow the user access to the IP address?

A. Create a user based access control rule to allow the traffic.

B. Create a rule to bypass inspection to allow the traffic.

C. Create a custom blacklist to allow the traffic.

D. Create a network based access control rule to allow the traffic.

E. Create a whitelist and add the appropriate IP address to allow the traffic.

Discussion 0

Correct Answer: E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #54

Which label is given to a person who uses existing computer scripts to hack into computers lacking the expertise to write their own?

A. hacktivist

B. white hat hacker

C. phreaker

D. script kiddy

Discussion 0

Correct Answer: D Vote an answer

Question #55

Which two features of Cisco Web Reputation tracking can mitigate web-based threats? (Choose Two)

A. exploit filtering

B. web reputation filter

C. outbreak filter

D. bayesian filter

E. buffer overflow filter

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #56

Which IOS command do you enter to test authentication against a AAA server?

A. aaa authentication enable default test group tacacs+

B. test aaa-server authentication dialergroup username <user> password.

C. ppp authentication chap pap test

D. dialer aaa suffix <suffix> password <password>

Discussion 0

Correct Answer: B Vote an answer

Question #57

You are configuring a NAT rule on a Cisco ASA. Which description of a mapped interface is true?

A. It is optional in transparent mode.

B. It is mandatory for identity NAT only.

C. It is mandatory for all fire wall modes.

D. It is optional in routed mode.

Discussion 0

Correct Answer: D Vote an answer

Question #58

Which component do you use to perform a device posture assessment in a BYOD solution?

A. Cisco ISE

B. Cisco ASA

C. Cisco AnyConnect VPN

D. WLAN controller

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #59

What are two major considerations when choosing between a SPAN and a TAP when implementing IPS?

A. Whether RX and TX signals will use separate ports

B. The way in which droped packects will be handled

C. The amount of bandwidth available

D. The type of analysis the IPS will perform

E. The way in which media errors will be handled

Discussion 0

Correct Answer: A,D Vote an answer

Question #60

Refer to the exhibit.

While troubleshooting site-to-site VPN, you issued the show crypto ipsec sa command. What does the given output show?

A. IPSec Phase 2 is established between 10.1.1.1 and 10.1.1.5.

B. IPSec Phase 2 is down due to a mismatch between encrypted and decrypted packets.

C. IKE version 2 security associations are established between 10.1.1.1 and 10.1.1.5.

D. ISAKMP security associations are established between 10.1.1.5 and 10.1.1.1.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Cisco 210-260 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 210-260 exam.