New Questions 7

Which command is needed to enable SSH support on a Cisco Router?

A. crypto key lock rsa

B. crypto key generate rsa

C. crypto key zeroize rsa

D. crypto key unlock rsa

View Answer

New Questions 8

Which statement about extended access lists is true?

A. Extended access lists perform filtering that is based on source and destination and are

most effective when applied to the destination

B. Extended access lists perform filtering that is based on source and destination and are most effective when applied to the source

C. Extended access lists perform filtering that is based on destination and are most effective when applied to the source

D. Extended access lists perform filtering that is based on source and are most effective when applied to the destination

View Answer

New Questions 9

Which IOS command do you enter to test authentication against a AAA server?

A. dialer aaa suffix <suffix> password <password>

B. ppp authentication chap pap test

C. aaa authentication enable default test group tacacs+

D. test aaa-server authentication dialergroup username <user> password.

View Answer

New Questions 10

What security feature allows a private IP address to access the Internet by translating it to a public address?

A. NAT

B. hairpinning

C. Trusted Network Detection

D. Certification Authority

View Answer

New Questions 11

Which two actions can a zone-based firewall take when looking at traffic? (Choose two)

A. Filter

B. Forward

C. Drop

D. Broadcast

E. Inspect

View Answer

New Questions 12

Within an 802.1X enabled network with the Auth Fail feature configured, when does a switch port get placed into a restricted VLAN?

A. When 802.1X is not globally enabled on the Cisco catalyst switch

B. When AAA new-model is enabled

C. When a connected client fails to authenticate after a certain number of attempts

D. If a connected client does not support 802.1X

E. After a connected client exceeds a specific idle time

View Answer

New Questions 13

Which network device does NTP authenticate?

A. Only the time source

B. Only the client device

C. The firewall and the client device

D. The client device and the time source

View Answer

New Questions 14

Which three statements about Cisco host-based IPS solutions are true? (Choose three.)

A. It can view encrypted files.

B. It can have more restrictive policies than network-based IPS.

C. It can generate alerts based on behavior at the desktop level.

D. It can be deployed at the perimeter.

E. It uses signature-based policies.

F. It works with deployed firewalls.

View Answer

New Questions 15

Which IPS mode is less secure than other options but allows optimal network throughput?

A. Promiscuous mode

B. inline mode

C. transparent mode

D. inline-bypass mode

View Answer

New Questions 16

Which type of firewall can act on the behalf of the end device?

A. Stateful packet

B. Application

C. Packet

D. Proxy

View Answer