Module 1-4

An administrator defined a local user account with a secret password on router R1 for use with SSH. Which three additional steps are required to configure R1 to accept only encrypted SSH connections? (Choose three.)

• Configure a host name other than "Router".

• Configure DNS on the router.

• Generate crypto keys.

• Generate two-way pre-shared keys.

• Configure the IP domain name on the router.

Which command will block login attempts on RouterA for a period of 30 seconds if there are 2 failed login attempts within 10 seconds?

• RouterA(config)# login block-for 10 attempts 2 within 30

• RouterA(config)# login block-for 30 attempts 2 within 10

• RouterA(config)# login block-for 2 attempts 30 within 10

• RouterA(config)# login block-for 30 attempts 10 within 2

Which two practices are associated with securing the features and performance of router operating systems? (Choose two.)

• Install a UPS.

• Keep a secure copy of router operating system images.

• Configure the router with the maximum amount of memory possible.

• Disable default router services that are not necessary.

• Reduce the number of ports that can be used to access the router.

Passwords can be used to restrict access to all or parts of the Cisco IOS. Select the modes and interfaces that can be protected with passwords. (Choose three.)

• VTY interface

• Ethernet interface

• console interface

• privileged EXEC mode

• boot IOS mode

A network administrator enters the service password-encryption command into the configuration mode of a router. What does this command accomplish?

• This command encrypts passwords as they are transmitted across serial WAN links.

• This command prevents someone from viewing the running configuration passwords.

• This command enables a strong encryption algorithm for the enable secret password command.

• This command automatically encrypts passwords in configuration files that are currently stored in NVRAM.

• This command provides an exclusive encrypted password for external service personnel who are required to do router maintenance.

On which two interfaces or ports can security be improved by configuring executive timeouts? (Choose two.)

• Fast Ethernet interfaces

• console ports

• serial interfaces

• vty ports

• loopback interfaces

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes an attack vector?

• data loss through access to personal or corporate instant messaging and social media sites

• the path by which a threat actor can gain access to a server, host, or network

• intercepted emails that reveal confidential corporate or personal information

• the unauthorized transfer of data containing valuable corporate information to a USB drive

What is the purpose of mobile device management (MDM) software?

• It is used to create a security policy.

• It is used to implement security policies, setting, and software configurations on mobile devices.

• It is used to identify potential mobile device vulnerabilities.

• It is used by threat actors to penetrate the system.

Which security implementation will provide management plane protection for a network device?

• antispoofing

• routing protocol authentication

• role-based access control

• access control lists

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of access to cloud storage devices?

• intercepted emails that reveal confidential corporate or personal information

• gaining illegal access to corporate data by stealing passwords or cracking weak passwords

• sensitive data lost through access to the cloud that has been compromised due to weak security settings

• the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software