SRWE Q1

What is a secure configuration option for remote access to a network device?

• Configure SSH.

• Configure 802.1x.

• Configure an ACL and apply it to the VTY lines.

• Configure Telnet.

After a host has generated an IPv6 address by using the DHCPv6 or SLAAC process, how does the host verify that the address is unique and therefore usable?

• The host checks the local neighbor cache for the learned address and if the address is not cached, it it considered unique.

• The host sends an ICMPv6 neighbor solicitation message to the DHCP or SLAAC-learned address and if no neighbor advertisement is returned, the address is considered unique.

• The host sends an ICMPv6 echo request message to the DHCPv6 or SLAAC-learned address and if no reply is returned, the address is considered unique.

• The host sends an ARP broadcast to the local link and if no hosts send a reply, the address is considered unique.

After attaching four PCs to the switch ports, configuring the SSID and setting authentication properties for a small office network, a technician successfully tests the connectivity of all PCs that are connected to the switch and WLAN. A firewall is then configured on the device prior to connecting it to the Internet. What type of network device includes all of the described features?

• standalone wireless access point

• firewall appliance

• switch

• wireless router

Which wireless encryption method is the most secure?

• WPA2 with AES

• WPA2 with TKIP

• WEP

• WPA

What are three techniques for mitigating VLAN attacks? (Choose three.)

• Enable BPDU guard.

• Set the native VLAN to an unused VLAN.

• Use private VLANs.

• Disable DTP.

• Enable trunking manually.

An administrator is trying to remove configurations from a switch. After using the command erase startup-config and reloading the switch, the administrator finds that VLANs 10 and 100 still exist on the switch. Why were these VLANs not removed?

• These VLANs cannot be deleted unless the switch is in VTP client mode.

• These VLANs can only be removed from the switch by using the no vlan 10 and no vlan 100 commands.

• These VLANs are default VLANs that cannot be removed.

• Because these VLANs are stored in a file that is called vlan.dat that is located in flash memory, this file must be manually deleted.

A network administrator is configuring a WLAN. Why would the administrator disable the broadcast feature for the SSID?

• to reduce the risk of interference by external devices such as microwave ovens

• to reduce the risk of unauthorized APs being added to the network

• to provide privacy and integrity to wireless traffic by using encryption

• to eliminate outsiders scanning for available SSIDs in the area

Compared with dynamic routes, what are two advantages of using static routes on a router? (Choose two.)

• They automatically switch the path to the destination network when the topology changes.

• They improve the efficiency of discovering neighboring networks.

• They use fewer router resources.

• They improve netw​ork security.

• They take less time to converge when the network topology changes.

A static route has been configured on a router. However, the destination network no longer exists. What should an administrator do to remove the static route from the routing table?

• Remove the route using the no ip route command.

• Change the administrative distance for that route.

• Nothing. The static route will go away on its own.

• Change the routing metric for that route.

Which two statements are characteristics of routed ports on a multilayer switch? (Choose two.)​

• In a switched network, they are mostly configured between switches at the core and distribution layers.

• They are used for point-to-multipoint links.

• They are not associated with a particular VLAN.

• They support subinterfaces, like interfaces on the Cisco IOS routers.

• The interface vlan <vlan number> command has to be entered to create a VLAN on routed ports.