MODULE 5-7 CCNASEC

Which privilege level is predefined for the privileged EXEC mode?

• level 0
• level 1
• level 15
• level 16

What is a requirement to use the Secure Copy Protocol feature?

• At least one user with privilege level 1 has to be configured for local authentication
• A command must be issued to enable the SCP server side functionality
• A transfer can only originate from SCP clients that are routers
• The Telnet protocol has to be configured on the SCP server side

Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)

• content of a security banner
• enable secret password
• enable password
• services to disable
• IP addresses of interfaces

Which syslog message type is accessible only to an administrator and only via the Cisco CLI?

• errors
• alerts
• debugging
• emergency

Refer to the exhibit. What two statements describe the NTP status of the router? (Choose two.)

• The router is attached to a stratum 2 device
• The IP address of the time source for the router is 192.168.1.1
• The router is serving as a time source for the device at 192.168.1.1
• The software clock for the router must be configured with the set clock command so that NTP will function properly
• The router is serving as an authoritative time source

An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?

• privilege exec level 15
• privilege exec level 0
• privilege exec level 1
• privilege exec level 2

A network administrator is analyzing the features supported by the multiple versions of SNMP. What are two features that are supported by SNMPv3 but not by SNMPv1 or SNMPv2c? (Choose two.)

• message encryption
• message source validation
• community-based security
• SNMP trap mechanism
• bulk retrieval of MIB information

A network administrator is configuring an AAA server to manage TACACS+ authentication. What are two attributes of TACACS+ authentication? (Choose two.)

• TCP port 40
• encryption for all communication
• separate processes for authentication and authorization
• UDP port 1645
• single process for authentication and authorization

What are two characteristics of the RADIUS protocol? (Choose two.)

• encryption of the password only
• the use of UDP ports for authentication and accounting
• encryption of the entire body of the packet
• the separation of the authentication and authorization processes
• the use of TCP port 49

What is the one major difference between local AAA authentication and using the login local command when configuring device access authentication?

• Local AAA authentication provides a way to configure backup methods of authentication, but login local does not
• The login local command requires the administrator to manually configure the usernames and passwords, but local AAA authentication does not
• Local AAA authentication allows more than one user account to be configured, but login local does not
• The login local command uses local usernames and passwords stored on the router, but local AAA authentication does not