Font size
WorksheetsNetAdmin mods 8-9
Total questions: 71
Worksheet time: 39mins
Which VPN benefit allows an enterprise to easily add more users to the network?
Cost Savings
Security
Scalability
Compatibility
Which VPN benefit allows an enterprise to increase the bandwidth for remote sites without necessarily adding more equipment or WAN links?
Cost Savings
Security
Scalability
Compatibility
Which VPN benefit uses advanced encryption and authentication protocols to protect data from unauthorized access?
Cost Savings
Security
Scalability
Compatibility
Which VPN benefit uses advanced encryption and authentication protocols to protect data from unauthorized access?
Site-to-Site
Remote Access
GRE
IPSec
Which VPN solutions are typically managed by an enterprise? (Choose three)
MPLS Layer 3
IPSec
SSL
Frame Relay
DMVPN
What type of VPN can be established with a web browser using HTTPS?
IPsec
Client-based VPN
Site-to-Site VPN
Clientless VPN
Which feature describes SSL VPNs?
All IP-Based applications are supported
Only requires a web browser on a host
Specific devices with specific configurations can connect
Uses two-way authentication with shared keys or digital certificates
What type of protocol is GRE?
Security Protocol
Passenger Protocol
Carrier Protocol
Transport Protocol
What type of VPN enables an enterprise to rapidly scale secure access across the organization?
DMPVN
Remote-access VPN
Site-to-Site VPN
MPLS VPN
What type of VPN enables an enterprise to emulate an Ethernet multiaccess LAN with remote sites?
DMVPN
Remote-access VPN
Site-to-Site VPN
MPLS VPN
IPsec can protect traffic in which OSI layers? (Choose four.)
Layer 3
Layer 4
Layer 5
Layer 6
Layer 7
Which IPsec function uses pre-shared passwords, digital certificates, or RSA certificates?
IPsec protocol
Confidentiality
Integrity
Authentication
Diffie-Hellman
True or False: The IPsec framework must be updated each time a new standard is developed.
True
False
Which choices are packet encapslation options suported by IPsec? (Choose two.)
AES
AH
DH24
ESP
PSK
Which choices provide for the Confidentiality function in the IPsec framework? (Choose three.)
3DES
AES
AH
DH24
SEAL
Which choices provide for the Integrity function in the IPsec framework? (Choose two.)
AES
AH
MD5
SEAL
SHA
Which choices are available for the Authentication function in the IPsec framework? (Choose two.)
AES
AH
DH24
PSK
RSA
Which Diffie-Hellman group choices are no longer recommended?
DH groups 1, 2, and 5
DH groups 14, 15, and 16
DH groups 19, 20, 21, and 24
Which two statements describe a remote access VPN? (Choose two.)
It requires static configuration of the VPN tunnel
It requires hosts to send TCP/IP traffic through a VPN gateway
It may require VPN client software on hosts
It connects entire networks to each other
It is used to connect individual hosts securely to a company network over the Internet.
The use of 3DES within the IPsec framework is an example of which of the five IPsec building blocks?
nonrepudiation
confidentiality
authentication
integrity
Diffle-Hellman
Which type of VPN may require the Cisco VPN Client software?
SSL VPN
remote access VPN
MPLS VPN
site-to-site VPN
Which technique is necessary to ensure a private transfer of data using a VPN?
virtualization
authorization
scalability
encryption
What are the two fundamental Dynamic Multipoint VPN tunnel types? (Choose two.)
hub-to-spoke
site-to-site
client-to-site
server-to-client
spoke-to-spoke
What are two reasons a company would use a VPN? (Choose two.)
to eliminate the need of having a gateway
to increase bandwidth to the network
to allow suppliers to access the network
to test network connections to remote users
to connect remote users to the network
True or False?
All VPNs securely transmit clear text across the Internet.
True
False
Which solution allows workers to telecommute effectively and securely?
site-to-site VPN
DSL connection
remote-access VPN
dial-up connection
Which VPN type is a service provider managed VPN?
Layer 3 MPLS VPN
site-to-site VPN
remote access VPN
GRE over IPsec VPN
Which IPsec framework protocol provides data integrity and data authentication, but does not provide data confidentiality?
IP protocol 50
ESP
DH
AH
What algorithm is used to provide data integrity of a message through the use of a calculated hash value?
RSA
AES
HMAC
DH
Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?
The shorter the key, the harder it is to break.
The length of a key will not very between encryption algorithms.
The longer the key, the more key possibilities exist.
The length of a key does not affect the degree of security.
What is a type of VPN that is generally transparent to the end user?
private
site-to-site
remote access
public
What is the variable amount of time it takes for a frame to traverse the links between the source and destination?
serialization delay
propagation delay
code delay
What happens when congestion occurs?
packet loss
jitter
code delay
What is the fixed amount of time it takes to transmit a frame from the NIC to the wire?
serialization delay
jitter
code delay
What is caused by variation in delay?
congestion
packet loss
jitter
Which type of traffic tends to consume a large portion of network capacity?
voice
video
data
Which type of traffic requires at least 384 Kbs of bandwidth?
voice
video
data
Which type of traffic is unpredictable, inconsistent, and bursty?
voice
video
data
Which type of traffic can be predictable and smooth?
voice
video
data
Which type of traffic cannot be retransmitted if lost?
voice
video
data
Which type of traffic must receive a higher UDP priority?
voice
video
data
Which queuing algorithm simultaneously schedules interactive traffic to the front of a queue to reduce response time?
FIFO
WFQ
CBWFQ
LLQ
Which queuing algorithm provides support for user-defined traffic classes?
FIFO
WFQ
CBWFQ
LLQ
Which queuing algorithm is effective for large links that have little delay and minimal congestion?
FIFO
WFQ
CBWFQ
LLQ
Which queuing algorithm classifies traffic into different flows based on packet header addressing?
FIFO
WFQ
CBWFQ
LLQ
Which queuing algorithm allows delay-sensitive data such as voice to be sent before packets in other queues?
FIFO
WFQ
CBWFQ
LLQ
Which queuing algorithm applies priority, or weights, to identify traffic and classify it?
FIFO
WFQ
CBWFQ
LLQ
Which QoS model provides per-request policy admission control?
best effort
integrated services
differential services
Which QoS model requires no special QoS mechanisms?
best effort
integrated services
differential services
Which QoS model provides many different levels of quality?
best effort
integrated services
differential services
Which QoS model uses explicit end-to-end resource admission control?
best effort
integrated services
differential services
Which QoS model is the most scalable?
best effort
integrated services
differential services
Which detects when traffic rates reach a configured maximum rate and drops excess traffic?
traffic policing
traffic shaping
classification
Which determines what class of traffic packets or frames belong to.
marking
classification
traffic shaping
Which adds a value to the packet header?
marking
classification
802.1Q
Which provides buffer management and allows TCP traffic to throttle back before buffers are exhausted?
traffic policin
802.1Q
WRED
Which retains excess packets in a queue and then schedules the excess for later transmission over increments of time?
WRED
traffic policing
traffic shaping
What is the term used to indicate a variation of delay?
serialization delay
jitter
latency
speed mismatch
A network engineer performs a ping test and receives a value that shows the time it takes for a packet to travel from a source to a destination device and return. Which term describes the value?
priority
latency
bandwidth
jitter
What role do network devices play in the IntServ QoS model?
Network devices provide a best-effort approach to forwarding traffic
Network devices ensure that resources are available before traffic is allowed to be sent by a host through the network.
Network devices are configured to service multiple classes of traffic and handle traffic as it may arrivce
Which device would be classified as a trusted endpoint?
firewall
router
switch
IP Phone
Under which condition does congestion occur on a converged network with voice, video, and data traffic?
If voice traffic latency begins to decrease across the network
If the request for bandwidth exceeds the amount of bandwidth available
if video traffic requests more bandwidth than voice traffic requests
If a user downloads a file that exceeds the file limitation and that is seaid the helicopter
Which type of traffic does Cisco recommend be placed in the strict priority queue (PQ) when low latency queuing (LLQ) is being used?
data
video
voice
management
Which model is the only QoS model with no mechanism to classify packets?
IntServ
hard QoS
Diffeserve
best-effort
What happens when the memory queue of a device fills up and new network traffic is received?
The network device queues the recieved traffic while sending previously recieved traffic.
The network device drops all traffic in the queue
The work device will drop the arriving packets
The network device sends the recieved traffic immediately.
What are two characteristics of voice traffic? (Choose two.)
It consumes few network resources.
It is delay sensitive.
It is insensitive to packet loss.
It is bursty.
It can tolerate latency up to 400 ms.
Which QoS model is very resource intensive and provides the highest guarantee of QoS?
soft QoS
IntServ
best-effort
DiffServ
What happens when an edge router using IntServ QoS determines that the data pathway cannot support the level of QoS requested?
Data is forwarded along the pathway using DiffServ.
Data is forwarded along the pathway using a best-effort approach
Data is forwarded along the pathway using IntServ but not provided preferential treatment.
Data is not forwarded along the pathway.
In QoS models, which type of traffic is commonly provided the most preferential treatment over all other application traffic?
web traffic
file transfers
voice traffic
Which queuing mechanism supports user-defined traffic classes?
FIFO
CBWFQ
WFQ
FCFS
What mechanism compensates for jitter in an audio stream by buffering packets and then replaying them outbound in a steady stream?
WFQ
playout delay buffer
digital signal processor
voice codec
