WorksheetsC2 - Quiz
Total questions: 27
Worksheet time: 27mins
Name
Class
Date
1.
What IOS privilege levels are available to assign for custom user-level privileges?
a)
levels 1 through 15
b)
levels 0, 1, and 15
c)
levels 2 through 14
d)
levels 0 and 1
2.
Which privilege level is predefined for the privileged EXEC mode?
a)
level 0
b)
level 1
c)
level 15
d)
level 16
3.
An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?
a)
privilege exec level 0
b)
privilege exec level 1
c)
privilege exec level 2
d)
privilege exec level 15
4.
Which command will move the show access-lists command to privilege level 14?
a)
router(config)# privilege level 14 command show access-lists
b)
router(config)# privilege exec level 14 show access-lists
c)
router(config)# show access-lists privilege level 14
d)
router(config)# set privilege level 14 show access-lists
5.
Refer to the exhibit. Based on the output of the show running-config command, which type of view is SUPPORT?
a)
secret view, with a level 5 encrypted password
b)
root view, with a level 5 encrypted secret password
c)
superview, containing SHOWVIEW and VERIFYVIEW views
d)
CLI view, containing SHOWVIEW and VERIFYVIEW commands
6.
A student is learning role-based CLI access and CLI view configurations. The student opens Packet Tracer and adds a router. Which command should be used first for creating a CLI view named TECH-View?
a)
Router# enable view
b)
Router(config)# aaa new-model
c)
Router# enable view TECH-view
d)
Router(config)# parser view TECH-view
7.
A student is learning about role-based views and role-based view configurations. The student enters the Router(config)# parser view TECH-view command. What is the purpose of this command?
a)
to create a CLI view named TECH-view
b)
to enter the CLI view named TECH-view
c)
to enter the superview named TECH-view
d)
to check the current setup of the CLI view named TECH-view
8.
Refer to the exhibit. A student uses the show parser view all command to see a summary of all views configured on router R1. What is indicated by the symbol * next to JR-ADMIN?
a)
It is a root view.
b)
It is a CLI view.
c)
It is a superview.
d)
It is a CLI view without a command configured.
9.
What is a requirement to use the Secure Copy Protocol feature?
a)
The Telnet protocol has to be configured on the SCP server side.
b)
A transfer can only originate from SCP clients that are routers.
c)
At least one user with privilege level 1 has to be configured for local authentication.
d)
A command must be issued to enable the SCP server side functionality.
10.
What are two characteristics of the Cisco IOS Resilient Configuration feature? (Choose two.)
a)
It is a universal feature that can be activated on all Cisco devices.
b)
It minimizes the downtime of a device that has had the image and configuration deleted.
c)
It sends a backup copy of the IOS image to a TFTP server.
d)
It maintains a mirror image of the configuration file in RAM.
e)
It saves a secure copy of the primary image and device configuration that cannot be removed by a user.
11.
A network engineer is implementing security on all company routers. Which two commands must be issued to force authentication via the password 1A2b3C for all OSPF-enabled interfaces in the backbone area of the company network? (Choose two.)
a)
ip ospf message-digest-key 1 md5 1A2b3C
b)
area 1 authentication message-digest
c)
username OSPF password 1A2b3C
d)
enable password 1A2b3C
e)
area 0 authentication message-digest
12.
Which syslog message type is accessible only to an administrator and only via the Cisco CLI?
a)
errors
b)
debugging
c)
emergency
d)
alerts
13.
Refer to the exhibit. What information in the syslog message identifies the facility
a)
level 5
b)
ADJCHG
c)
OSPF
d)
Loading Done
e)
3
14.
Refer to the image: What two statements describe the NTP status of the router? (Choose two.)
a)
The router is serving as an authoritative time source.
b)
The router is serving as a time source for the device at 192.168.1.1.
c)
The router is attached to a stratum 2 device.
d)
The IP address of the time source for the router is 192.168.1.1.
e)
The software clock for the router must be configured with the set clock command so that NTP will function properly.
15.
A network administrator is analyzing the features supported by the multiple versions of SNMP. What are two features that are supported by SNMPv3 but not by SNMPv1 or SNMPv2c? (Choose two.)
a)
bulk retrieval of MIB information
b)
message source validation
c)
community-based security
d)
message encryption
e)
SNMP trap mechanism
16.
Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?
a)
accessibility
b)
accounting
c)
auditing
d)
authentication
e)
authorization
17.
Which AAA component can be established using token cards?
a)
accounting
b)
authorization
c)
auditing
d)
authentication
18.
What is the biggest issue with local implementation of AAA?
a)
Local implementation cannot provide secure authentication.
b)
Local implementation supports only RADIUS servers.
c)
Local implementation supports only TACACS+ servers.
d)
Local implementation does not scale well.
19.
What is the one major difference between local AAA authentication and using the login local command when configuring device access authentication?
a)
Local AAA authentication allows more than one user account to be configured, but login local does not.
b)
The login local command uses local usernames and passwords stored on the router, but local AAA authentication does not.
c)
Local AAA authentication provides a way to configure backup methods of authentication, but login local does not.
d)
The login local command requires the administrator to manually configure the usernames and passwords, but local AAA authentication does not.
20.
Which authentication method stores usernames and passwords in the router and is ideal for small networks?
a)
local AAA
b)
local AAA over RADIUS
c)
local AAA over TACACS+
d)
server-based AAA
e)
server-based AAA over RADIUS
21.
A network administrator is configuring an AAA server to manage TACACS+ authentication. What are two attributes of TACACS+ authentication? (Choose two.)
a)
encryption for only the password of a user
b)
encryption for all communication
c)
separate processes for authentication and authorization
d)
UDP port 1645
e)
single process for authentication and authorization
22.
Which two UDP port numbers may be used for server-based AAA RADIUS authentication? (Choose two.)
a)
1645
b)
1812
c)
1646
d)
1813
e)
49
23.
What are two characteristics of the RADIUS protocol? (Choose two.)
a)
encryption of the entire body of the packet
b)
the use of TCP port 49
c)
the use of UDP ports for authentication and accounting
d)
encryption of the password only
e)
the separation of the authentication and authorization processes
24.
Which task is necessary to encrypt the transfer of data between the ACS server and the AAA-enabled router?
a)
Specify the single-connection keyword.
b)
Create a VPN tunnel between the server and the router.
c)
Configure the key exactly the same way on the server and the router.
d)
Use identical reserved ports on the server and the router.
25.
What is the primary function of the aaa authorization command?
a)
permit AAA server access to AAA client services
b)
limit authenticated user access to AAA client services
c)
permit authenticated user access to AAA client services
d)
limit AAA server access to AAA client services
26.
What are three characteristics of superviews in the Cisco role-based CLI access feature? (Choose three.)
a)
Commands cannot be configured for a superview.
b)
A single CLI view can be shared within multiple superviews.
c)
Deleting a superview does not delete the associated CLI views.
d)
A user uses a superview to configure commands inside associated CLI views.
e)
A user uses the command enable view superview-name to enter a superview.
27.
Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)
a)
content of a security banner
b)
interfaces to enable
c)
enable secret password
d)
enable password
e)
IP addresses of interfaces
100 %
