GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

test2

Carlos Ibarra 10 Fragen

Quiz starten

Dieses Quiz hat ein Zeitlimit und öffnet sich deshalb im gewohnten Player.

Fragen in diesem Quiz (10)

  1. 1David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as : I am trying to authentication a Windows 7 laptop using 802.1x against a Cisco ISE server, The laptop is connected to a Cisco 3560-X. The user resides in Active Directory. All authentication attempts are tailing with a “RADIUS request dropped” error, we verified that the password is being correctly typed.
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of the authentication failure?
    1. AUDP port 1812 is blocked between the switch and ISE
    2. BWrong EAP type is being used
    3. CIncompatible Switch code
    4. DCrypto Map not applied for Site-1 on GM3
    5. EEncryption error between ISE and Active Directory
    6. FRADIUS shared key is incorrect
    7. GShared secret between Windows and Switch is incorrect
  2. 2David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as :“We are trying to implement Guest access on our switches using ISE and Central Web Authentication. We have Configured ISE and the Switches according to Cisco’s guides, but when the end user opens a browser, they do not get redirection to the ISE guest portal. We need help in troubleshooting this.”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of this problem?
    1. AThe URL redirect ACL does not allow access to cisco.com
    2. BURL redirect only works when the original request is an intranet site
    3. CThe machine is authorized in the wrong domain
    4. DIncompatible Switch Code
    5. EThe downloadable ACL does not allow traffic to UDP port 53
    6. FISE is configured on the wrong port for the portal.
  3. 3David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as : “I am trying to authenticate a Windows 7 laptop using 802.1x against a Cisco ISE Server. The laptop is connected to a Cisco 3560-X. The authentication attempts keeping failing with error 5400.
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.”
    With all the information available to you, what is the cause of this problem?
    1. AEnable EAP-TLS on the “Default Network Access” allowed protocol object.
    2. BSelf signed certificate cannot be used for EAP authentication
    3. CThe Self signed certificate needs to be trusted on the end point
    4. DDot1.x priority is incorrect in switch interface configuration
    5. EClient is rejecting the EAP protocol proposed by the ISE server.
  4. 4David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as :
    “We are trying to implement Guest access on our switches using ISE and Central Web Authentication. We have Configured ISE and the Switches according to Cisco’s guides, but even after a successful authentication the guest user is redirect back again and again to the guest portal page. They do not get access to the network.”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of this problem?
    1. ASwitch is not able to accept new policies due to a defect.
    2. BThe switch is not configured to accept RADIUS CoA messages from ISE
    3. CWrong authorization result is applied to guest authorization policy.
    4. DGuest credentials are incorrect
    5. EThe guest account is set to activate at a later date and time
      live
  5. 5David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as:
    “We are trying to implement profiling so as to use its results as a mean to authorize devices. For testing, we are using a Windows 7 laptop and ISE is not able to profile it as such. The device shows up as an Intel-device instead of a Windows 7 Workstation.”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of this problem?
    1. AUser needs to be redirected to guest portal to profile correctly.
    2. BNot enough probes have been enabled to profile a Windows machine
    3. CISE’s IP address is missing under VLAN1 as an ip helper-address
    4. DFeed service has corrupted the profiling policies
    5. EDevice sensor configuration is incomplete
  6. 6David from Acme Inc has opened a service request with Cisco TAC. He describes the problem as:
    “We are trying to implement TACACS+ authentication and command authorization on our Cisco switches with Cisco ISE as the server. We have configured ISE and the switch as per the user guide, but we have problem with command authorization. All authorized users should be able to use any show command, but they are not able to”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of this problem?
    1. AThe user is authorized at privilege level 5 where show command not available
    2. BThe implicit deny in the default authorization rule is causing command authorization failure
    3. C“Permit any command that is not listed below” should be enabled on the command set
    4. DCommand set has wrong argument for the show command
    5. E“Auto Command” should be “show” in the TACACS profile
  7. 7Johnny X from CustomerNet Inc has open a service request with Cisco TAC. He describes the problem as“intermittent performance issue when users trying to access the Internet through WSA”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is the cause of this problem?
    1. AToo many requests per second (overloaded appliance)
    2. BNetwork issues and disabled PMTU discovery
    3. CChrome browser usage influences the performance, change the browser and test again
    4. DDestination server is responding slower than usual
    5. EL4 traffic monitoring feature is on and causing the performance issues
    6. FOne of the DNS servers might be root cause of the issue.
  8. 8Johnny X from CustomerNet Inc has open a service request with Cisco TAC. He describes the problem as “intermittent issue with access to specific HTTPS site access”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, What should be the next step suggested to customer in order to resolve the issue?
    1. AConfigure decryption policy pass-through affected sites
    2. BTest and check if server name extension is enable on WSA
    3. CMake sure to export WSA’s ROOT CA certificate and import in to test PCs Trusted Root Certificate Authorities store
    4. DTest using openssl tool from other client, issue might be because site uses SSLv3 protocol only, and client tries to negotiate using TLS v2
    5. EOne of the DNS Server might be root cause of the issue
    6. FDisable upstream proxy and try if the site works again
    7. GTest with another browser and collect the logs again
    8. HConfigure default access policy pass-through affected sites
  9. 9Johnny X from CustomerNet Inc has open a service request with Cisco TAC. He describes the problem as “Unable to access a website”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you. What is most likely to be the root cause the client not being able to access the requested website.
    1. AWhen establishing the connection, the “SEED-SHA” cipher needs to be enabled on the appliance
    2. BDestination server requires a client certificate.
    3. CTLS 1.2 is not supported on the server and needs to be disable so we can Fallback to TLS 1.0
    4. DThe intermediate candidate is not send by the server and needs to me imported
    5. Eit seems to the browser error as this Cipher is not supported in the browser of the client. Try another browser
  10. 10Johnny X from CustomerNet Inc has open a service request with Cisco TAC. He describes the problem as “External senders are no able to send emails”
    Network diagram and email exchange between the TAC engineer and customer are provided for the analysis.
    With all the information available to you, what is most likely to be the root cause of the ESA rejecting many senders?
    1. AThe Default parameter for concurrent connections is very low with a Value of “10”. Increase this Value to “100”
    2. BSenderbase was never contacted and therefore, the Reputation Filtering is causing issues.
    3. CThe email contains Malware and The Outbreak is putting it in Quarantine.
    4. DThe email contains a malicious URL and is blocked by a Content filter named “CFDefandMaliciousUrls”
    5. EThe Sender needs to be resolvable via DNS and this is not the case “Check your DNS server”
    6. FThe sbrs score of “none” is included in the “BLACKLIST”. Remove this setting and add the sbrs score of “none” to the “SUSPECLIST”

Informationen

Beschreibung
Capacitación Laboral Educación Quiz am test2, erstellt von Carlos Ibarra am 15/09/2019.
Sprache
Español
Aufrufe
6
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck