GoConqr hat ein neues Design! Sag uns, wie es dir gefällt.

Kostenlos registrieren

Quiz

CCNA Security Cp 8.1

Thomas Rowsome 14 Fragen

Quiz starten

Fragen in diesem Quiz (14)

  1. 1What three protocols must be permitted through the company firewall for establishment of IPsec site-to-site VPNs? (Choose three.)
    1. AHTTPS
    2. BSSH
    3. CAH
    4. DISAKMP
    5. ENTP
    6. FESP
  2. 2Which statement describes the effect of key length in deterring an attacker from hacking through an encryption key?
    1. AThe length of a key does not affect the degree of security.
    2. BThe shorter the key, the harder it is to break.
    3. CThe length of a key will not vary between encryption algorithms.
    4. DThe longer the key, the more key possibilities exist.
  3. 3What is the purpose of configuring multiple crypto ACLs when building a VPN connection between remote sites?
    1. ABy applying the ACL on a public interface, multiple crypto ACLs can be built to prevent public users from connecting to the VPN-enabled router.
    2. BMultiple crypto ACLs can define multiple remote peers for connecting with a VPN-enabled router across the Internet or network.
    3. CMultiple crypto ACLs can be configured to deny specific network traffic from crossing a VPN.
    4. DWhen multiple combinations of IPsec protection are being chosen, multiple crypto ACLs can define different traffic types.
  4. 4Consider the following configuration on a Cisco ASA:
    crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    What is the purpose of this command?
    1. Ato define the ISAKMP parameters that are used to establish the tunnel
    2. Bto define the encryption and integrity algorithms that are used to build the IPsec tunnel
    3. Cto define what traffic is allowed through and protected by the tunnel
    4. Dto define only the allowed encryption algorithms
  5. 5Which transform set provides the best protection?
    1. Acrypto ipsec transform-set ESP-DES-SHA esp-aes-256 esp-sha-hmac
    2. Bcrypto ipsec transform-set ESP-DES-SHA esp-3des esp-sha-hmac
    3. Ccrypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
    4. Dcrypto ipsec transform-set ESP-DES-SHA esp-aes esp-des esp-sha-hmac
  6. 6Which three ports must be open to verify that an IPsec VPN tunnel is operating properly? (Choose three.)
    1. A168
    2. B50
    3. C169
    4. D501
    5. E500
    6. F51
  7. 7When is a security association (SA) created if an IPsec VPN tunnel is used to connect between two sites?
    1. Aafter the tunnel is created, but before traffic is sent
    2. Bonly during Phase 2
    3. Conly during Phase 1
    4. Dduring both Phase 1 and 2
  8. 8In which situation would the Cisco Discovery Protocol be disabled?
    1. Awhen a Cisco VoIP phone attaches to a Cisco switch
    2. Bwhen a Cisco switch connects to another Cisco switch
    3. Cwhen a Cisco switch connects to a Cisco router
    4. Dwhen a PC with Cisco IP Communicator installed connects to a Cisco switch
  9. 9Which two statements accurately describe characteristics of IPsec? (Choose two.)
    1. AIPsec works at the transport layer and protects data at the network layer.
    2. BIPsec is a framework of proprietary standards that depend on Cisco specific algorithms.
    3. CIPsec is a framework of standards developed by Cisco that relies on OSI algorithms.
    4. DIPsec is a framework of open standards that relies on existing algorithms.
    5. EIPsec works at the network layer and operates over all Layer 2 protocols.
  10. 10Which action do IPsec peers take during the IKE Phase 2 exchange?
    1. Aexchange of DH keys
    2. Bnegotiation of IPsec policy
    3. Cnegotiation of IKE policy sets
    4. Dverification of peer identity

Informationen

Beschreibung
CCNA Security Quiz am CCNA Security Cp 8.1, erstellt von Thomas Rowsome am 11/04/2018.
Sprache
English
Aufrufe
3
Schlagwörter
ccna security
Bewertung
Noch keine Bewertungen
Bewerte dieses Quiz
Bewerte dieses Quiz

Feedback

Worum geht es?

Wie gefällt dir das neue Design?

Dein Eindruck