Module 4

At what point in the enterprise network are packets arriving from the internet examined prior to entering the network?

• Campus Core

• Internet Edge

• Network Edge

• WAN Edge

What three configuration steps must be performed to implement SSH access to a router? (Choose three.)

• an IP domain name

• a unique hostname

• a user account

• an enable mode password

• an encrypted password

What is one difference between using Telnet or SSH to connect to a network device for management purposes?

• Telnet uses UDP as the transport protocol whereas SSH uses TCP.

• Telnet sends a username and password in plain text, whereas SSH encrypts the username and password.

• Telnet supports a host GUI whereas SSH only supports a host CLI.

• Telnet does not provide authentication whereas SSH provides authentication

Which three areas of router security must be maintained to secure an edge router at the network perimeter? (Choose three.)

• operating system security

• router hardening

• physical security

• flash security

• remote access security

What is a good password recommendation for a Cisco router?

• Use the service password-encryption command to protect a password used to log into a remote device across the network.

• Use a minimum of 7 characters.

• Zeroize all passwords used.

• Use one or more spaces within a multiword phrase.

What is the purpose of using a banner message on a Cisco network device?

• It can provide more security by slowing down attacks.

• It can be used to create a quiet period where remote connections are refused.

• It is effective in deflecting threat actors from entering the device.

• It can protect the organization from a legal perspective

A network administrator establishes a connection to a switch via SSH. What characteristic uniquely describes the SSH connection?

• out-of-band access to a switch through the use of a virtual terminal with password authentication

• remote access to the switch through the use of a telephone dialup connection

• direct access to the switch through the use of a terminal emulation program

• on-site access to a switch through the use of a directly connected PC and a console cable

• remote access to a switch where data is encrypted during the session

What command will prevent all unencrypted passwords from displaying in plain text in a configuration file?

• (config-line)# password secret

• (config)# enable secret Secret_Password

• (config)# enable password secret

• (config)# service password-encryption

A network administrator is issuing the login block-for 180 attempts 2 within 30 command on a router. Which threat is the network administrator trying to prevent?

• a user who is trying to guess a password to access the router

• a worm that is attempting to access another part of the network

• an unidentified individual who is trying to access the network equipment room

• a device that is trying to inspect the traffic on a link

Which recommended security practice prevents attackers from performing password recovery on a Cisco IOS router for the purpose of gaining access to the privileged EXEC mode?

• Configure secure administrative control to ensure that only authorized personnel can access the router.

• Locate the router in a secure locked room that is accessible only to authorized personnel.

• Keep a secure copy of the router Cisco IOS image and router configuration file as a backup.

• Disable all unused ports and interfaces to reduce the number of ways that the router can be accessed.

• Provision the router with the maximum amount of memory possible.