Font size
WorksheetsCisco Attacks
Total questions: 26
Worksheet time: 7mins
What is a Malware that holds a computer system captive until a payment is made to the attacker?
Spyware
Adware
Ransomeware
Virus
What is the most common goal of search engine optimization (SEO) poisoning?
To trick someone into installing malware or divulging personal information
To overwhelm a network device with maliciously formed packets
To build a botnet of zombies
To increase web traffic to malicious sites
A set of changes done to any program or application with the aim of updating, fixing or improving it is what?
A fix
A hack
An install
A patch
Which of the following should be carried out to address known software vulnerabilities of a specific application?
Change the hardware
Change the software
Remove the application
Install a security patch
Which of the following characteristics describe a worm? (Choose Two)
Infects computers by attaching to software code
Hides in a dormant state until needed by an attacker
Travels to new computers without any intervention or knowledge of the user
Is self-replicating
Which statement about the operation of a standard ACL is incorrect?
The router extracts the source IPv4 address from the packet header.
Router starts at top of ACL and compares address to each ACE sequentially
When a match is made, the ACE either permits or denies the packet
If there are no matching ACEs in the ACL, the packet is forwarded
Which of the following is an ACL best practice?
Always test ACLs on a production network.
Create your ACLs on a production router.
Document the ACLs using the description ACL command.
Write the ACL before configuring it on a router.
Which two conditions would cause a router to drop a packet? (Choose two.)
No inbound ACL exists on the interface where the packet enters the router.
The ACL affecting the packet does not contain at least one deny ACE.
Pckt source address doesn't match source permitted in a stndrd inbound ACE.
No routing table entry exists for the packet destination
No outbound ACL exists on the interface where the packet exits the router.
Configuring ACL with R1(config)# access-list 1 permit 172.16.0.0 0.0.15.255. Which two IP addresses match ACL statement?
172.16.0.255
172.16.15.36
172.16.16.12
172.16.31.24
Which two statements describe appropriate general guidelines for configuring and applying ACLs? (Choose two.)
Multiple ACLs per protocol and per direction can be applied to interface.
If an ACL contains no permit statements, all traffic is denied by default.
The most specific ACL statements should be entered first (top-down nature)
Standard ACLs are placed closest to the source
Which scenario would cause an ACL misconfiguration and deny all traffic?
Apply a standard ACL in the inbound direction.
Apply a named ACL to a VTY line.
Apply an ACL that has all deny ACE statements.
Apply a standard ACL using the ip access-group outcommand.
What single access list matches all of the following networks? 192.168.16.0; 192.168.17.0; 192.168.18.0; 192.168.19.0
access-list 10 permit 192.168.16.0 0.0.3.255
access-list 10 permit 192.168.16.0 0.0.0.255
access-list 10 permit 192.168.16.0 0.0.15.255
access-list 10 permit 192.168.0.0 0.0.15.255
Which three statements describe ACL processing of packets? (Choose three.)
An implicit deny any rejects any packet doesn't match any ACE.
A packet can either be rejected or forwarded as directed by the ACE.
A packet doesn't match conditions of any ACE will be forwarded by default.
Each statement is checked till a match is detected or till end of ACE list
Each packet is compared to the conditions of every ACE in the ACL
What happens if ACL is incorrectly applied to an interface in the inbound direction instead of the outbound direction?
All traffic is denied.
All traffic is permitted.
The ACL does not perform as designed.
The ACL will analyze traffic after it is routed to the outbound interface.
When creating an ACL, which keyword should be used to document and interpret the ACL statement on a Cisco device?
eq
established
remark
description
In applying an ACL to a router interface, which traffic is designated as outbound?
Traffic that is coming from the source IP address into the router
Traffic that is leaving the router and going toward the destination host
Traffic that is going from the destination IP address into the router
Traffic for which the router can find no routing table entry
Which location is recommended for extended numbered or extended named ACLs?
A location as close to the destination of traffic as possible
A location as close to the source of traffic as possible
A location centered between destinations and sources to filter most traffic
Using the established keyword is to ensure that return traffic is allowed
Which range represents all IP addresses when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
10.120.160.0 to 10.127.255.255
10.120.160.0 to 10.120.167.255
10.120.160.0 to 10.120.168.0
10.120.160.0 to 10.120.191.255
The computers used by the network administrators for a school are on the 10.7.0.0/27 network. Which two commands are needed at a minimum to apply an ACL that will ensure that only devices that are used by the network administrators will be allowed Telnet access to the routers? (Choose two.)
access-class 5 in
access-list 5 deny any
access-list 5 permit 10.7.0.0 0.0.0.31
ip access-group 5 out
ip access-group 5 in
Consider the configured access list.
R1# show access-lists
extended IP access list 100
deny tcp host 10.1.1.2 host 10.1.1.1 eq telnet
deny tcp host 10.1.2.2 host 10.1.2.1 eq telnet
permit ip any any (15 matches)
What are two characteristics of this access list? (Choose two.)
The access list has been applied to an interface.
A network administrator would not be able to tell if the access list has been applied to an interface or not.
Any device on the 10.1.1.0/24 network (except the 10.1.1.2 device) can telnet to the router that has the IP address 10.1.1.1 assigned.
Any device can telnet to the 10.1.2.1 device.
The 10.1.2.1 device is not allowed to telnet to the 10.1.2.2 device.
Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?
access-list 101 permit tcp any eq 4300
access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255
access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www
access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www
access-list 101 permit tcp host 192.168.30.10 eq 80 10.1.0.0 0.0.255.255 eq 4300
What packets would match the access control list statement that is shown below?
access-list 110 permit tcp 172.16.0.0 0.0.0.255 any eq 22
SSH traffic from the 172.16.0.0 network to any destination network
SSH traffic from any source network to the 172.16.0.0 network
Any TCP traffic from any host to the 172.16.0.0 network
Any TCP traffic from the 172.16.0.0 network to any destination network
Consider the access list command applied outbound on a router serial interface.
access-list 100 deny icmp 192.168.10.0 0.0.0.255 any echo reply
What is the effect of applying this access list command?
The only traffic denied is ICMP-based traffic. All other traffic is allowed.
The only traffic denied is echo-replies sourced from the 192.168.10.0/24 network. All other traffic is allowed.
Users on the 192.168.10.0/24 network are not allowed to transmit traffic to any other destination.
No traffic will be allowed outbound on the serial interface.
Consider the following output for an ACL that has been applied to a router via the access-class in command. What can a network administrator determine from the output that is shown?
R1# <output omitted>
Standard IP access list 2
10 permit 192.168.10.0, wildcard bits 0.0.0.255 (2 matches)
20 deny any (1 match)
Two devices connected to the router have IP addresses of 192.168.10.x.
Traffic from one device was not allowed to come into one router port and be routed outbound a different router port.
Two devices were able to use SSH or Telnet to gain access to the router.
Traffic from two devices was allowed to enter one router port and be routed outbound to a different router port.
Which two commands will configure a standard ACL? (Choose two.)
Router(config)# access-list 20 permit host 192.168.5.5 any any
Router(config)# access-list 90 permit 192.168.10.5 0.0.0.0
Router(config)# access-list 45 permit 192.168.200.4 host
Router(config)# access-list 10 permit 10.20.5.0 0.255.255.255 any
Router(config)# access-list 35 permit host 172.31.22.7
What two ACEs could be used to deny IP traffic from a single source host 10.1.1.1 to the 192.168.0.0/16 network? (Choose two.)
Access-list 100 deny ip host 10.1.1.1 192.168.0.0 0.0.255.255
Access-list 100 deny ip 192.168.0.0 0.0.255.255 host 10.1.1.1
Access-list 100 deny ip 10.1.1.1 255.255.255.255 192.168.0.0 0.0.255.255
Access-list 100 deny ip 192.168.0.0 0.0.255.255 10.1.1.1 0.0.0.0
Access-list 100 deny ip 10.1.1.1 0.0.0.0 192.168.0.0 0.0.255.255
