Network Security - Modules 5-7

Which privilege level is predefined for the privileged EXEC mode?

• level 0

• level 1

• level 15

• level 16

What is a requirement to use the Secure Copy Protocol feature?

• At least one user with privilege level 1 has to be configured for local authentication.

• A command must be issued to enable the SCP server side functionality.

• • A transfer can only originate from SCP clients that are routers.

• • The Telnet protocol has to be configured on the SCP server side.

Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)

• IP addresses of interfaces

• content of a security banner

• enable secret password

• • services to disable

• enable password

Which syslog message type is accessible only to an administrator and only via the Cisco CLI?

• errors

• alerts

• debugging

• emergency

Refer to the exhibit. What two statements describe the NTP status of the router? (Choose two.)

• The software clock for the router must be configured with the set clock command so that NTP will function properly.

• The router is attached to a stratum 2 device.

• The router is serving as a time source for the device at 192.168.1.1.

• The IP address of the time source for the router is 192.168.1.1.

• The router is serving as an authoritative time source.

An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?

• privilege exec level 15

• privilege exec level 0

• privilege exec level 1

• privilege exec level 2

A network administrator is analyzing the features supported by the multiple versions of SNMP. What are two features that are supported by SNMPv3 but not by SNMPv1 or SNMPv2c? (Choose two.)

• message encryption

• • community-based security

• SNMP trap mechanism

• message source validation

• bulk retrieval of MIB information

A network administrator is configuring an AAA server to manage TACACS+ authentication. What are two attributes of TACACS+ authentication? (Choose two.)

• TCP port 40

• encryption for all communication

• single process for authentication and authorization

• UDP port 1645

• separate processes for authentication and authorization

What are two characteristics of the RADIUS protocol? (Choose two.)

• encryption of the entire body of the packet

• encryption of the password only

• the use of UDP ports for authentication and accounting

• the separation of the authentication and authorization processes

• the use of TCP port 49

What is the one major difference between local AAA authentication and using the login local command when configuring device access authentication?

• The login local command requires the administrator to manually configure the usernames and passwords, but local AAA authentication does not.

• Local AAA authentication allows more than one user account to be configured, but login local does not.

• Local AAA authentication provides a way to configure backup methods of authentication, but login local does not.

• The login local command uses local usernames and passwords stored on the router, but local AAA authentication does not.