Font size
Worksheetsdasdas
Total questions: 10
Worksheet time: 6mins
Refer to the exhibit. A network administrator is configuring a VPN between routers R1 and R2. Which commands would correctly configure a pre-shared key for the two routers?
R1(config-if)# ppp pap sent-username R1 password 5tayout!
R2(config-if)# ppp pap sent-username R2 password 5tayout!
R1(config)# crypto isakmp key 5tayout! hostname R1
R2(config)# crypto isakmp key 5tayout! hostname R2
R1(config)# crypto isakmp key 5tayout! address 64.100.0.2
R2(config)# crypto isakmp key 5tayout! address 64.100.0.1
R1(config)# username R2 password 5tayout!
R2(config)# username R1 password 5tayout!
Refer to the exhibit. Which statement is true about the effect of this Cisco IOS zone-based policy firewall configuration?
The firewall will automatically allow HTTP, HTTPS, and FTP traffic from s0/0/0 to g0/0 and will track the connections. Tracking the connection allows only return traffic to be permitted through the firewall in the opposite direction.
The firewall will automatically allow HTTP, HTTPS, and FTP traffic from s0/0/0 to g0/0, but will not track the state of connections. A corresponding policy must be applied to allow return traffic to be permitted through the firewall in the opposite direction.
The firewall will automatically allow HTTP, HTTPS, and FTP traffic from g0/0 to s0/0/0 and will track the connections. Tracking the connection allows only return traffic to be permitted through the firewall in the opposite direction.
return traffic to be permitted through the firewall in the opposite direction.
The firewall will automatically allow HTTP, HTTPS, and FTP traffic from g0/0 to s0/0/0, but will not track the state of connections. A corresponding policy must be applied to allow return traffic to be permitted through the firewall in the opposite direction.
Which privilege level has the most access to the Cisco IOS?
level 16
level 7
level 15
level 0
level 1
Refer to the exhibit. A network administrator has configured NAT on an ASA device. What type of NAT is used?
outside NAT
bidirectional NAT
static NAT
inside NAT
A network analyst is configuring a site-to-site IPsec VPN. The analyst has configured both the ISAKMP and IPsec policies. What is the next step?
Verify that the security feature is enabled in the IOS.
Issue the show crypto ipsec sa command to verify the tunnel.
Apply the crypto map to the appropriate outbound interfaces.
Configure the hash as SHA and the authentication as pre-shared.
When an inbound Internet-traffic ACL is being implemented, what should be included to prevent the spoofing of internal networks?
ACEs to prevent SNMP traffic
ACEs to prevent HTTP traffic
ACEs to prevent ICMP traffic
ACEs to prevent broadcast address traffic
ACEs to prevent traffic from private address spaces
Which two types of attacks are examples of reconnaissance attacks? (Choose two.)
SYN flood
man-in-the-middle
brute force
ping sweep
port scan
Which Cisco solution helps prevent ARP spoofing and ARP poisoning attacks?
Port Security
DHCP Snooping
IP Source Guard
Dynamic ARP Inspection
Which Cisco solution helps prevent ARP spoofing and ARP poisoning attacks?When the Cisco NAC appliance evaluates an incoming connection from a remote device against the defined network policies, what feature is being used?
quarantining of noncompliant systems
authentication and authorization
remediation of noncompliant systems
posture assessment
Which two steps are required before SSH can be enabled on a Cisco router? (Choose two.)
Enable SSH on the physical interfaces where the incoming connection requests will be received.
Set up an authentication server to handle incoming connection requests.
Create a banner that will be displayed to users when they connect.
Give the router a host name and domain name.
Generate a set of secret keys to be used for encryption and decryption.
