2017 January Cisco Official New Released 500-260 Dumps in Lead2pass.com!
100% Free Download! 100% Pass Guaranteed!
500-260 easy pass guide: Preparing for Cisco 500-260 exam is really a tough task to accomplish. However, Lead2pass delivers the most comprehensive braindumps, covering each and every aspect of 500-260 exam curriculum.
Following questions and answers are all new published by Cisco Official Exam Center: http://www.lead2pass.com/500-260.html
QUESTION 51
The “HTTPS decryption” feature is enabled with the default settings and decryption and IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an untrusted certificate?
A. The HTTPS traffic is decrypted but not inspected by the IPS.
B. The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.
C. The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.
D. The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.
E. The HTTPS traffic is forwarded to the client but is not decrypted or inspected.
Answer: B
QUESTION 52
Which three elements are reported in an IPS for NGFW event? (Choose three.)
A. web reputation score
B. target value rating
C. threat score
D. risk rating
E. destination operating system
F. application type
Answer: ACF
QUESTION 53
When establishing a Cisco AnyConnect SSL VPN tunnel, a system administrator wants to restrict remote home office users to either print to their local printer or send the remaining traffic down the Cisco AnyConnect SSL VPN tunnel (with restricted Internet access).
Choose both a tunnel policy option and an ACL type to accomplish this design goal.
(Choose two.)
A. tunnel all networks
B. tunnel network list below
C. exclude network list from the tunnel
D. standard ACL
E. web ACL
F. extended ACL
Answer: CD
QUESTION 54
Drag and Drop Question
Answer:
QUESTION 55
Drag and Drop Question
Answer:
QUESTION 56
Drag and Drop Question
Answer:
QUESTION 57
Which three features does the Cisco Meraki Security Appliance offer? (Choose three.)
A. multisite cloud management
B. antivirus
C. web-aware firewall
D. content filtering
E. auto-VPN
Answer: ADE
QUESTION 58
Refer to the exhibit. A new NOC engineer, while viewing a real-time log from an SSL VPN tunnel, has a question about a line in the log.
The IP address 172.26.26.30 is attached to which interface in the network?
A. the Cisco ASA physical interface
B. the physical interface of the end user
C. the Cisco ASA SSL VPN tunnel interface
D. the SSL VPN tunnel interface of the end user
Answer: B
QUESTION 59
The Cisco ASA software image has been erased from flash memory. Which two statements about the process to recover the Cisco ASA software image are true? (Choose two.)
A. Access to the ROM monitor mode is required.
B. The Cisco ASA appliance must have connectivity to the TFTP server where the Cisco ASA image is stored through the Management 0/0 interface.
C. The copy tftp flash command is necessary to start the TFTP file transfer.
D. The server command is necessary to set the TFTP server IP address.
E. Cisco ASA password recovery must be enabled.
Answer: AD
QUESTION 60
To maintain employee productivity, employee access is restricted based on application, user, device, and location.
Which two licenses are needed to allow administrators to enforce company policy? (Choose two.)
A. AVC
B. Botnet Filtering
C. IPS for NGFW
D. WSE
E. AnyConnect Premium
Answer: AD
Lead2pass provides guarantee of Cisco 500-260 exam because Lead2pass is an authenticated IT certifications site. The 500-260 dump is updated with regular basis and the answers are rechecked of every exam. Good luck in your exam.
500-260 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDUVRuaVllQi1YNlE
2017 Cisco 500-260 exam dumps (All 79 Q&As) from Lead2pass:
http://www.lead2pass.com/500-260.html [100% Exam Pass Guaranteed]