210-260 試験問題を無料オンラインアクセス

What are two default behaviour of the traffic on a zone-based firewall? (Choose two.)

• A.Traffic within self zone uses an implicit deny all
• B.The CBAC rules that are configure on router interface apply to zone interfaces.
• C.Communication is allowed between interfaces that are members of the same zone.
• D.Communication is blocked between interfaces that are members of the same zone.
• E.All traffic between zones is implicitly blocked.

Which address block is reserved for locally assigned unique local addresses?

• A.FB00::/8
• B.FD00::/8
• C.2001::/32
• D.2002::/16

Which feature allow from dynamic NAT pool to choose the next IP address and not a port on a used IP address?

• A.dynamic PAT rotation
• B.next IP
• C.dynamic rotation
• D.round robin

You are configuring a site-to-site tunnel between two Cisco routers by using IPsec. Which option do you set to specify the peer to which you want to connect?

• A.IP address of a tunnel destination
• B.IP address as part of the ISAKMP configuration
• C.Tunnel group that has a peer IP address
• D.IP address by using a crypto map

Refer to the exhibit.

What is the effect of the given command?

• A.It configures encryption for MD5 HMAC.
• B.It configures authentication as AES 256.
• C.It configures the network to use a different transform set between peers.
• D.It merges authentication and encryption methods to protect traffic that matches an ACL.