Quiz
seguridad 2
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (25)
1Which two characteristics apply to role-based CLI access superviews? (Choose two.)
- AA specific superview cannot have commands added to it directly
- BCLI views have passwords, but superviews do not have passwords.
- CA single superview can be shared among multiple CLI views.
- DDeleting a superview deletes all associated CLI views.
- EUsers logged in to a superview can access all commands specified within the associated CLI views.
2Which three types of views are available when configuring the role-based CLI access feature? (Choose three.)
- Asuperview
- Badmin view
- Croot view
- Dsuperuser view
- ECLI view
- Fconfig view
3If AAA is already enabled, which three CLI steps are required to configure a router with a specific view? (Choose three.)
- ACreate a superview using the parser view view-name command.
- BAssociate the view with the root view.
- CAssign users who can use the view.
- DCreate a view using the parser view view-name command
- EAssign a secret password to the view.
- FAssign commands to the view.
4What occurs after RSA keys are generated on a Cisco router to prepare for secure device management?
- AThe keys must be zeroized to reset Secure Shell before configuring other parameters.
- BAll vty ports are automatically configured for SSH to provide secure management.
- CThe general-purpose key size must be specified for authentication with the crypto key generate rsa general-keys moduluscommand
- DThe generated keys can be used by SSH.
5Which three statements describe limitations in using privilege levels for assigning command authorization? (Choose three.)
- ACreating a user account that needs access to most but not all commands can be a tedious process
- BViews are required to define the CLI commands that each user can access.
- CCommands set on a higher privilege level are not available for lower privilege users.
- DIt is required that all 16 privilege levels be defined, whether they are used or not.
- EThere is no access control to specific interfaces on a router.
- FThe root user must be assigned to each privilege level that is defined.
6What command must be issued to enable login enhancements on a Cisco router?
- Aprivilege exec level
- Blogin delay
- Clogin block-for
- Dbanner motd
7An administrator defined a local user account with a secret password on router R1 for use with SSH. Which three additional steps are required to configure R1 to accept only encrypted SSH connections? (Choose three.)
- AEnable inbound vty SSH sessions.
- BGenerate two-way pre-shared keys.
- CConfigure DNS on the router.
- DConfigure the IP domain name on the router.
- EEnable inbound vty Telnet sessions.
- FGenerate the SSH keys.
8 Which set of commands are required to create a username of admin, hash the password using MD5, and force the router to access the internal username database when a user attempts to access the console?
- AR1(config)# username admin password Admin01pa55
R1(config)# line con 0
R1(config-line)# login local - BR1(config)# username admin secret Admin01pa55
R1(config)# line con 0
R1(config-line)# login local - CR1(config)# username admin Admin01pa55 encr md5
R1(config)# line con 0
R1(config-line)# login local - DR1(config)# username admin password Admin01pa55
R1(config)# line con 0
R1(config-line)# login - ER1(config)# username admin secret Admin01pa55
R1(config)# line con 0
R1(config-line)# login
- AR1(config)# username admin password Admin01pa55
9Refer to the exhibit. Which statement about the JR-Admin account is true?
- AJR-Admin can issue only ping commands.
- BJR-Admin can issue show, ping, and reload commands.
- CJR-Admin cannot issue any command because the privilege level does not match one of those defined.
- DJR-Admin can issue debug and reload commands.
- EJR-Admin can issue ping and reload commands
10What is the default privilege level of user accounts created on Cisco routers?
- A0
- B15
- C1
- D16
11 Which three areas of router security must be maintained to secure an edge router at the network perimeter? (Choose three.)
- Aremote access security
- Bzone isolation
- Crouter hardening
- Doperating system security
- Eflash security
- Fphysical security
12Which recommended security practice prevents attackers from performing password recovery on a Cisco IOS router for the purpose of gaining access to the privileged EXEC mode?
- ALocate the router in a secure locked room that is accessible only to authorized personnel.
- BConfigure secure administrative control to ensure that only authorized personnel can access the router.
- CKeep a secure copy of the router Cisco IOS image and router configuration file as a backup.
- DProvision the router with the maximum amount of memory possible.
- EDisable all unused ports and interfaces to reduce the number of ways that the router can be accessed.
13Refer to the exhibit. Based on the output of the show running-config command, which type of view is SUPPORT?
- ACLI view, containing SHOWVIEW and VERIFYVIEW commands
- Bsuperview, containing SHOWVIEW and VERIFYVIEW views
- Csecret view, with a level 5 encrypted password
- Droot view, with a level 5 encrypted secret password
14A network administrator notices that unsuccessful login attempts have caused a router to enter quiet mode. How can the administrator maintain remote access to the networks even during quiet mode?
- AQuiet mode behavior can be enabled via an ip access-group command on a physical interface.
- BQuiet mode behavior will only prevent specific user accounts from attempting to authenticate.
- CQuiet mode behavior can be overridden for specific networks by using an ACL.
- DQuiet mode behavior can be disabled by an administrator by using SSH to connect.
15What is a characteristic of the Cisco IOS Resilient Configuration feature?
- AIt maintains a secure working copy of the bootstrap startup program.
- BOnce issued, the secure boot-config command automatically upgrades the configuration archive to a newer version after new configuration commands have been entered.
- CA snapshot of the router running configuration can be taken and securely archived in persistent storage.
- DThe secure boot-image command works properly when the system is configured to run an image from a TFTP server.
16What are two reasons to enable OSPF routing protocol authentication on a network? (Choose two.)
- Ato provide data security through encryption
- Bto ensure faster network convergence
- Cto ensure more efficient routing
- Dto prevent data traffic from being redirected and then discarded
- Eto prevent redirection of data traffic to an insecure link
17 Which two options can be configured by Cisco AutoSecure? (Choose two.)
- Aenable secret password
- Binterface IP address
- CSNMP
- Dsecurity banner
- Esyslog
18Which three functions are provided by the syslog logging service? (Choose three.)
- Asetting the size of the logging buffer
- Bspecifying where captured information is stored
- Cgathering logging information
- Dauthenticating and encrypting data sent over the network
- Edistinguishing between information to be captured and information to be ignored
- Fretaining captured messages on the router when a router is rebooted
19What is the Control Plane Policing (CoPP) feature designed to accomplish?
- Adisable control plane services to reduce overall traffic
- Bprevent unnecessary traffic from overwhelming the route processor
- Cdirect all excess traffic away from the route process
- Dmanage services provided by the control plane
20What is a requirement to use the Secure Copy Protocol feature?
- AAt least one user with privilege level 1 has to be configured for local authentication.
- BA command must be issued to enable the SCP server side functionality.
- CA transfer can only originate from SCP clients that are routers.
- DThe Telnet protocol has to be configured on the SCP server side.
21What is a characteristic of the MIB?
- AThe OIDs are organized in a hierarchical structure.
- BInformation in the MIB cannot be changed.
- CA separate MIB tree exists for any given device in the network.
- DInformation is organized in a flat manner so that SNMP can access it quickly.
22Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)
- AIP addresses of interfaces
- Bcontent of a security banner
- Cenable secret password
- Dservices to disable
- Eenable password
- Finterfaces to enable
23A network engineer is implementing security on all company routers. Which two commands must be issued to force authentication via the password 1A2b3C for all OSPF-enabled interfaces in the backbone area of the company network? (Choose two.)
- Aarea 0 authentication message-digest
- Bip ospf message-digest-key 1 md5 1A2b3C
- Cusername OSPF password 1A2b3C
- Denable password 1A2b3C
- Earea 1 authentication message-digest
24What is the purpose of using the ip ospf message-digest-key key md5 password command and the area area-id authentication message-digest command on a router?
- Ato configure OSPF MD5 authentication globally on the router
- Bto enable OSPF MD5 authentication on a per-interface basis
- Cto facilitate the establishment of neighbor adjacencies
- Dto encrypt OSPF routing updates
25Which three actions are produced by adding Cisco IOS login enhancements to the router login process? (Choose three.)
- Apermit only secure console access
- Bcreate password authentication
- Cautomatically provide AAA authentication
- Dcreate syslog messages
- Eslow down an active attack
- Fdisable logins from specified hosts
Information
- Description
- Quiz on seguridad 2, created by sergio ocam on 18/02/2020.
- Author
- sergio ocam
- Language
- Español
- Views
- 0
- Rating
- No ratings yet Rate this quiz