dasdas

Refer to the exhibit. A network administrator is configuring a VPN between routers R1 and R2. Which commands would correctly configure a pre-shared key for the two routers?

• R1(config-if)# ppp pap sent-username R1 password 5tayout!

  R2(config-if)# ppp pap sent-username R2 password 5tayout!

• R1(config)# crypto isakmp key 5tayout! hostname R1

  R2(config)# crypto isakmp key 5tayout! hostname R2

• R1(config)# crypto isakmp key 5tayout! address 64.100.0.2

  R2(config)# crypto isakmp key 5tayout! address 64.100.0.1

• R1(config)# username R2 password 5tayout!

  R2(config)# username R1 password 5tayout!

Refer to the exhibit. Which statement is true about the effect of this Cisco IOS zone-based policy firewall configuration?

• The firewall will automatically allow HTTP, HTTPS, and FTP traffic from s0/0/0 to g0/0 and will track the connections. Tracking the connection allows only return traffic to be permitted through the firewall in the opposite direction.

• The firewall will automatically allow HTTP, HTTPS, and FTP traffic from s0/0/0 to g0/0, but will not track the state of connections. A corresponding policy must be applied to allow return traffic to be permitted through the firewall in the opposite direction.

• The firewall will automatically allow HTTP, HTTPS, and FTP traffic from g0/0 to s0/0/0 and will track the connections. Tracking the connection allows only return traffic to be permitted through the firewall in the opposite direction.

• return traffic to be permitted through the firewall in the opposite direction.

• The firewall will automatically allow HTTP, HTTPS, and FTP traffic from g0/0 to s0/0/0, but will not track the state of connections. A corresponding policy must be applied to allow return traffic to be permitted through the firewall in the opposite direction.

Which privilege level has the most access to the Cisco IOS?

• level 16

• level 7

• level 15

• level 0

• level 1

Refer to the exhibit. A network administrator has configured NAT on an ASA device. What type of NAT is used?

• outside NAT

• bidirectional NAT

• static NAT

• inside NAT

A network analyst is configuring a site-to-site IPsec VPN. The analyst has configured both the ISAKMP and IPsec policies. What is the next step?

• Verify that the security feature is enabled in the IOS.

• Issue the show crypto ipsec sa command to verify the tunnel.

• Apply the crypto map to the appropriate outbound interfaces.

• Configure the hash as SHA and the authentication as pre-shared.

When an inbound Internet-traffic ACL is being implemented, what should be included to prevent the spoofing of internal networks?

• ACEs to prevent SNMP traffic

• ACEs to prevent HTTP traffic

• ACEs to prevent ICMP traffic

• ACEs to prevent broadcast address traffic

• ACEs to prevent traffic from private address spaces

Which two types of attacks are examples of reconnaissance attacks? (Choose two.)

• SYN flood

• man-in-the-middle

• brute force

• ping sweep

• port scan

Which Cisco solution helps prevent ARP spoofing and ARP poisoning attacks?

• Port Security

• DHCP Snooping

• IP Source Guard

• Dynamic ARP Inspection

Which Cisco solution helps prevent ARP spoofing and ARP poisoning attacks?When the Cisco NAC appliance evaluates an incoming connection from a remote device against the defined network policies, what feature is being used?

• quarantining of noncompliant systems

• authentication and authorization

• remediation of noncompliant systems

• posture assessment

Which two steps are required before SSH can be enabled on a Cisco router? (Choose two.)

• Enable SSH on the physical interfaces where the incoming connection requests will be received.

• Set up an authentication server to handle incoming connection requests.

• Create a banner that will be displayed to users when they connect.

• Give the router a host name and domain name.

• Generate a set of secret keys to be used for encryption and decryption.