What are two considerations when using SSO as a network redundancy feature? (Choose two.)

must be combined with NSF to support uninterrupted Layer 3 operations

requires synchronization between supervisors in order to guarantee continuous connectivity

the multicast state is preserved during switchover

both supervisors must be configured separately

must be combined with NSF to support uninterrupted Layer 2 operations

An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The CiscolSE servers are hosted at 10.9.11.141 and 10.1.11.141. Which access list meets the requirements?

ip access-list extended ACL_WEBAUTH_REDIRECT 70 permit ip any host 10.9.11.141 80 permit ip any host 10.1.11.141 500 permit tcp any any eq www 600 permit tcp any any eq 443 700 permit tcp any any eq 8443 800 deny udp any any eq domain

ip access-list extended ACL_WEBAUTH_REDIRECT 70 permit ip any host 10.9.11.141 80 permit ip any host 10.1.1.141 500 deny top any any eq www 600 deny top any any eq 443 700 deny top any any eq 8443 800 deny udp any any eq domain 901 deny ip any any

ip access-list extended ACL_WEBAUTH_REDIRECT 50 deny ip host 10.9.11.44 any 60 deny ip any host 10.9.11.141 70 deny ip host 10.1.11.141 any 80 deny ip any host 10.1.11.141 500 permit tcp any any eq www 600 permittop any any eq 443 700 permit tcp any any eq 80

ip access-list extended ACL_WEBAUTH_REDIRECT 70 deny ip any host 10.9.11.141 80 deny ip any host 10.1.11.141 500 permit tcp any any eq www 600 permit tcp any any eq 443 700 permit tcp any any eq 8443 800 deny udp any any eq domain

Refer to the exhibit. An engineer must update the existing configuration to achieve these results: 1. Only administrators from the 192.168.1.0/24 subnet can access the vty lines. 2. Access to the vtv lines using clear-text protocols is prohibited. Which command set should be applied?

access-list 1 permit 192.168.1.0 0.0.0.255 line vty 0 15 access-class 1 in transport input ssh

access-list 1 permit 192.168.1.0 0.0.0.255 line vty 0 15 access-class 1 in transport input telnet ssh

access-list 1 permit 192.168.1.0 0.0.0.255 line vty 0 15 access-class 1 in transport input none

access-list 1 permit 192. 168.1.0 255.255.255.0 line vty 0 15 access-class 1 in transport input telnet rlogin

When a branch location loses connectivity, which Cisco FlexConnect state rejects new users but allows existing users to function normally?

Authentication-Down / Switch-Local

Authentication-Down / Switching-Down

Authentication-Central / Switch-Local

Authentication-Local / Switch-Local

Refer to the exhibit. The traceroute fails from R1 to R3. What is the cause of the failure?

An ACL applied inbound on fal/1 of R3 is dropping the traffic

Redistribution of connected routes into OSPF is not configured

The loopback on R3 is in a shutdown state

An ACL applied inbound on loopback0 of R2 is dropping the traffic

Refer to the exhibit. Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction, but it does not have the expected behavior of allowing only packets to or from 192.168.0.0/16. Which command set properly configures the access list?

R1(config)#ip access-list extended 100 R1(config-ext-nacl)# no 10

R1 (config)#no access-list 100 seq 10 R1(config)#access-list 100 seq 40 deny ip any any

R1(config)#ip access-list extended 100 R1 (config-ext-nacl)#5 permit ip any any

R1(config)#no access-list 100 deny ip any any

Which action limits the total amount of memory and CPU that is used by a collection of VMs?

Place the collection of VMs in a resource pool

Place the collection of VMs in a vApp

Limit the amount of memory and CPU that is available to the cluster

Limit the amount of memory and CPU that is available to the individual VMs

Which configuration creates a CoPP policy that provides unlimited SSH access from client 10.0.0.5 and denies access from all other SSH clients?

! access-list 100 deny tcp host 10.0.0.5 any eq 22 access-list 100 permit top any any eq 22 ! class-map match-all telnet_copp match access-group 100 ! policy-map CoPP class telnet_copp drop ! 22.02.2024 control-plane service-policy input CoPP !

! access-list 100 permit top host 10.0.0.5 any eq 22 access-list 100 deny tep any any eq 22 ! class-map match-all telnet_copp match access-group 100 ! policy-map CoPP class telnet_copp drop ! control-plane service-policy input CoPP !

! access-list 100 permit top host 10.0.0.5 any eq 22 access-list 100 deny tep any any eq 22 ! class-map matcn-all telnet_copp match access-group 100 ! policy-map CoPP class telnet_copp police 8000 ! control-plane service-policy input CoPP !

! access-list 100 permit top any any eq 22 access-list 100 deny top host 10.0.0.5 any eq 22 ! class-map match-all telnet_copp match access-group 100 ! policy-map CoPP class telnet_copp police 8000 ! control-plane service-policy input CoPP !

Which features does Cisco EDR use to provide threat detection and response protection?

containment, threat intelligence, and machine learning

cloud analysis and endpoint firewall controls

firewalling and intrusion prevention

What is the purpose of an RP in PIM?

send join messages toward a multicast source SPT

receive IGMP joins from multicast receivers

secure the communication channel between the multicast sender and receiver

ensure the shortest path from the multicast source to the receiver

Refer to the exhibit. An engineer is troubleshooting a newly configured BGP peering that does not establish. What is the reason for the failure?

A firewall is blocking access to TCP port 179 on the BGP peer 10.255.255.3

Mandatory BGP parameters between R1 and 10.255.255.3 are mismatched

BGP peer 10.255.255.3 is not configured for peering with R1

Both BGP peers are configured for passive TCP transport

Refer to the exhibit. An engineer must configure HSRP for VLAN 1000 on SW2. The secondary switch must immediately take over the role of active router if the interlink with the primary switch fails. Which command set completes this task?

SW2(config-if)# standby version 2 SW2(config-if)# standby 1000 ip 10.23.87.1 SW2(config-if)# standby 1000 priority 95 SW2(config-if)# standby 1000 preempt SW2(config-if)# standby 1000 track 1000

SW2(config-if)# standby version 2 SW2(config-if)# standby 1000 ip 10.23.87.1 SW2(config-if)# standby 1000 priority 95 SW2(config-if# standby 1000 track 1000

SW2(config-if)# standby 1000 ip 10.23.87.1 SW2(config-if)# standby 1000 priority 95 SW2(config-if)# standby 1000 preempt SW2(config-if)# standby 1000 track 1000

SW2(config-if)# standby version 2 SW2(config-f# standby 1000 ip 10.23.87.13 SW2(config-if)# standby 1000 priority 95 SW2(config-if)# standby 1000 preempt SW2(config-if)# standby 1000 track gigabitethernet0/0

What is a benefit of YANG?

It enforces the use of a specific encoding format for NETCONF

t enables multiple leaf statements to exist within a leaf list

It collects statistical constraint analysis informations

It enforces configuration semantics

Refer to the exhibit. The existing configuration must be updated to terminate EXEC sessions after 20 minutes of idle time. Which command set should be applied?

line vty 0 15 session-timeout 20

line vty 0 15 absolute-timeout 20

1. Refer to the exhibit. A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task? username admin privilege 15 password 0 Cisco13579! aaa new-model ! aaa authentication login default local aaa authentication enable default none ! aaa common-criteria policy Administrators min-length 1 max-length 127 char-changes 4 lifetime month 2 !

Add the username admin privilege 15 common-criteria-policy Administrators password Cisco 13579! command

No further action is required. The configuration is complete

Add the aaa authentication enable default Administrators command

The password expiry mechanism is on the AAA server and must be configured there

Refer to the exhibit. An engineer is configuring WebAuth on a Cisco Catalyst 9800 Series WLC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use it on the WebAuth splash page. What must be configured so that the clients do not receive a certificate error?

Virtual IPv4 Hostname must match the CN of the certificate

Virtual 1Pv4 Address must be set to a routable address

Web Auth Intercept HTTPs must be enabled

Trustpoint must be set to the management certificate of the WLC

In a Cisco SD-Access solution, what is the role of a fabric edge node?

to connect wired endpoints to the SD-Access fabric

to connect the fusion router to the SD-Access fabric

to advertise fabric IP address space to external networks

to connect external Layer 3 networks to the SD-Access fabric

What is the structure of a JSON web token?

three parts separated by dots: header, payload, and signature

three parts separated by dots: version, header, and signature

Refer to the exhibit. What is the result when a technician adds the monitor session 1 destination remote vlan 223 command?

The RSPAN VLAN is replaced by VLAN 223

RSPAN traffic is sent to VLANS 222 and 223

RSPAN traffic is split between VLANs 222 and 223

An error is flagged for configuring two destinations.

What is a characteristic of a virtual machine?

It relies on hypervisors to allocate computing resources for it

It must be aware of other virtual machines, in order to allocate physical resources for them

It must run the same operating system as its host

It is deployable without a hypervisor to host it

Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?

CISCO-CAPWAP-CONTROLLER.localdomain

CISCO.CAPWAP.CONTROLLER.localdomain

Why is an AP joining a different WLC than the one specified through option 43?

The WLC is running a different software version

The AP multicast traffic is unable to reach the WLC through Layer 3

The APs broadcast traffic is unable to reach the WLC through Layer 2

Refer to the exhibit. What does the snippet of code achieve?

It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context

It creates an SSH connection using the SSH key that is stored, and the password is ignored

It opens a tunnel and encapsulates the login information, if the host key is correct

It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls

Refer to the exhibit. Which command must be applied to R2 for an OSPF neighborship to form?

network 20.1.1.2 0.0.0.0 area 0

network 20.0,0.2 0.0.0.3 area 0

network 20.1.1.0 0.0.0.0 area 0

network 20.0.0.2 0.0.0.0 area 0

In which two ways does TCAM differ from CAM? (Choose two.)

The MAC address table is contained in CAM, and ACL and QOS information is stored in TCAM

CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups

CAM is used by routers for IP address lookups, and TCAM is used to make Layer 2 forwarding decisions

CAM is used for software switching mechanisms, and TCAM is used for hardware switching mechanisms

The MAC address table is contained in TCAM, and ACL and QoS information is stored in CAM

Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?

under interface saturation conditions

under traffic classification and marking conditions

under network convergence conditions

Refer to the exhibit. An engineer configures a new WLAN that will be used for secure communications; however, wireless clients report that they are able to communicate with each other. Which action resolves this issue?

Enable Wi-Fi Direct Client Policy

Refer to the exhibit. What is achieved by the XML code?

It configures an access list statement using the value of c1 as the sequence number that denies host c2 from reaching any destination

It adds the value of c1 to each of the access list statement sequence numbers

It adds statements to an access list by increasing each sequence number by the value of c1 until all hosts in the c2 list are included

It configures an access list statement that denies all hosts from reaching c2

What is the function of a fabric border node in a Cisco SD-Access environment?

To connect the Cisco SD-Access fabric to another fabric or external Layer 3 networks

To collect traffic flow information toward external networks

To attach and register clients to the fabric

To handle an ordered list of IP addresses and locations for endpoints in the fabric

Test 301-400

Authored by H C

English

1st - 5th Grade

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

100 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Which unit of measure is used to measure wireless RF SNR?

dBm

dBi

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the centralized control policy in a Cisco SD-WAN deployment?

set of statements that defines how routing is performed

list of enabled services for all nodes within the cloud

set of rules that governs nodes authentication within the cloud

list of ordered statements that define user access policies

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?

fabric edge node

fabric border node

fabric control plane node

fabric wireless controller

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Refer to the exhibit. A network engineer issues the debug command while troubleshooting a network issue. What does the output confirm?

ACL100 is tracking ICMP traffic from Serial 1/0 destined for Serial3/0

ACL100 is tracking ICMP traffic from 1.1.1.1 destined for 10.1.1.1

ACL 100 is tracking all traffic from 10.1.1.1 destined for 1.1.1.1

ACL100 is tracking ICMP traffic from 10.1.1. 1 destined for 1.1.1.1

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

A network administrator applies the following configuration to an IOS device:
aaa new-model
aaa authentication login default local group tacacs+
What is the process of password checks when a login attempt is made to the device?

A local database is checked first. If that check fails, a TACACS+ server is checked.

A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked.

A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked

TACACS + sewer is checked first 15 that check fails a local database is checked

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Refer to the exhibit: A client requests a new SSID that will use web-based authentication and extremal RADIUS servers. Which Layer 2 security mode must be selected?

WPA2+WPA3

Static WEP

None

WPA+WPA2

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Refer to the exhibit. An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command set accomplishes this task?

R1(config)#time-range WEEKEND

R1(config-time-range#periodic weekend 00:00 to 23:59

R1(config#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config)#access-list 150 permit ip any any.

R1(config)#interface G0/1

R1(config-if)#ip access-group 150 in

R1(config)#time-range WEEKEND

R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00

R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R1(config#access-list 150 permit ip any any

R1(config)#interface G0/1

R1(config-if#ip access-group 150 in

R3(config#time-range WEEKEND

R3(config-time-range)#periodic weekend 00:00 to 23:59

R3(config)access-list 150 permit tep host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(config)#access-list 150 permit ip any any time-range WEEKEND

R3(config)#interface G0/1

R3(config-if)#ip access-group 150 out

R3(config)#time-range WEEKEND

R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59

R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

R3(confia)# access-list 150 permit ip anv any time-range WEEKEND

R3(config)#interface GO/1

R3(config-if)#ip access-group 150 out

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

100 questions

K1_101-200_MB

Quiz

•

2nd - 3rd Grade

100 questions

IOE Lớp 5 (Số 1)

Quiz

•

5th Grade

100 questions

Present Simple

Quiz

•

3rd Grade

100 questions

IOE Lớp 5 (Số 2. P2) 100 câu

Quiz

•

5th Grade

100 questions

Addition and Subtraction Fluency Practice

Quiz

•

2nd Grade

102 questions

Year 4 Module 8

Quiz

•

4th Grade - University

100 questions

Level 1 - Second Term Exam A1

Quiz

•

2nd Grade

101 questions

Super-heroes

Quiz

•

4th - 6th Grade

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

20 questions

Figurative Language Review

Quiz

•

6th Grade

Discover more resources for English

20 questions

Main Idea and Details

Quiz

•

5th Grade

9 questions

Point of View

Quiz

•

3rd - 4th Grade

12 questions

Figurative Language Review

Interactive video

•

5th Grade

20 questions

Prefix and Suffix Review

Quiz

•

3rd - 5th Grade

20 questions

Character perspective, theme, summarize, author's purpose

Quiz

•

5th Grade

18 questions

Context Clues Practice

Quiz

•

5th Grade

20 questions

Figurative Language

Quiz

•

5th Grade

15 questions

Main Idea and Supporting Details.

Quiz

•

4th - 11th Grade

Test 301-400

Which unit of measure is used to measure wireless RF SNR?

What is the centralized control policy in a Cisco SD-WAN deployment?

In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?

Refer to the exhibit. A network engineer issues the debug command while troubleshooting a network issue. What does the output confirm?

A network administrator applies the following configuration to an IOS device:aaa new-modelaaa authentication login default local group tacacs+What is the process of password checks when a login attempt is made to the device?

Refer to the exhibit: A client requests a new SSID that will use web-based authentication and extremal RADIUS servers. Which Layer 2 security mode must be selected?

What is one primary REST security design principle?

What are two considerations when using SSO as a network redundancy feature? (Choose two.)

An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The CiscolSE servers are hosted at 10.9.11.141 and 10.1.11.141. Which access list meets the requirements?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for English

A network administrator applies the following configuration to an IOS device:
aaa new-model
aaa authentication login default local group tacacs+
What is the process of password checks when a login attempt is made to the device?