GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Quiz

CCNA Security Cp 2

Thomas Rowsome 26 Fragen

Quiz starten

Fragen in diesem Quiz (26)

  1. 1An administrator defined a local user account with a secret password on router R1 for use with SSH. Which three additional steps are required to configure R1 to accept only encrypted SSH connections? (Choose three.)
    1. AEnable inbound vty SSH sessions.
    2. BGenerate two-way pre-shared keys.
    3. CConfigure DNS on the router.
    4. DConfigure the IP domain name on the router.
    5. EEnable inbound vty Telnet sessions.
    6. FGenerate the SSH keys.
  2. 2Which set of commands are required to create a username of admin, hash the password using MD5, and force the router to access the internal username database when a user attempts to access the console?
    1. AR1(config)# username admin password Admin01pa55
      R1(config)# line con 0
      R1(config-line)# login local
    2. BR1(config)# username admin secret Admin01pa55
      R1(config)# line con 0
      R1(config-line)# login local
    3. CR1(config)# username admin Admin01pa55 encr md5
      R1(config)# line con 0
      R1(config-line)# login local
    4. DR1(config)# username admin password Admin01pa55
      R1(config)# line con 0
      R1(config-line)# login
    5. ER1(config)# username admin secret Admin01pa55
      R1(config)# line con 0
      R1(config-line)# login
  3. 3Which three areas of router security must be maintained to secure an edge router at the network perimeter? (Choose three.)
    1. Aremote access security
    2. Bzone isolation
    3. Crouter hardening
    4. Doperating system security
    5. Eflash security
    6. Fphysical security
  4. 4Which recommended security practice prevents attackers from performing password recovery on a Cisco IOS router for the purpose of gaining access to the privileged EXEC mode?
    1. ALocate the router in a secure locked room that is accessible only to authorized personnel.
    2. BConfigure secure administrative control to ensure that only authorized personnel can access the router.
    3. CKeep a secure copy of the router Cisco IOS image and router configuration file as a backup.
    4. DDisable all unused ports and interfaces to reduce the number of ways that the router can be accessed.
    5. EProvision the router with the maximum amount of memory possible.
  5. 5Which two characteristics apply to role-based CLI access superviews? (Choose two.)
    1. AA specific superview cannot have commands added to it directly.
    2. BCLI views have passwords, but superviews do not have passwords.
    3. CA single superview can be shared among multiple CLI views.
    4. DDeleting a superview deletes all associated CLI views.
    5. EUsers logged in to a superview can access all commands specified within the associated CLI views.
  6. 6Which three types of views are available when configuring the role-based CLI access feature? (Choose three.)
    1. Asuperview
    2. Badmin view
    3. Croot view
    4. Dsuperuser view
    5. ECLI view
    6. Fconfig view
  7. 7If AAA is already enabled, which three CLI steps are required to configure a router with a specific view? (Choose three.)
    1. ACreate a superview using the parser view view-name command.
    2. BAssociate the view with the root view.
    3. CAssign users who can use the view.
    4. DCreate a view using the parser view view-name command.
    5. EAssign a secret password to the view.
    6. FAssign commands to the view.
  8. 8What occurs after RSA keys are generated on a Cisco router to prepare for secure device management?
    1. AThe keys must be zeroized to reset Secure Shell before configuring other parameters.
    2. BAll vty ports are automatically configured for SSH to provide secure management.
    3. CThe general-purpose key size must be specified for authentication with the crypto key generate rsa general-keys moduluscommand.
    4. DThe generated keys can be used by SSH.
  9. 9Which three statements describe limitations in using privilege levels for assigning command authorization? (Choose three.)
    1. ACreating a user account that needs access to most but not all commands can be a tedious process.
    2. BViews are required to define the CLI commands that each user can access.
    3. CCommands set on a higher privilege level are not available for lower privilege users.
    4. DIt is required that all 16 privilege levels be defined, whether they are used or not.
    5. EThere is no access control to specific interfaces on a router.
    6. FThe root user must be assigned to each privilege level that is defined.
  10. 10What command must be issued to enable login enhancements on a Cisco router?
    1. Aprivilege exec level
    2. Blogin delay
    3. Clogin block-for
    4. Dbanner motd

Informationen

Beschreibung
CCNA Security Quiz am CCNA Security Cp 2, erstellt von Thomas Rowsome am 18/03/2018.
Sprache
English
Aufrufe
0
Schlagwörter
ccna security
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck