Quiz
seguridad 2
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (25)
1Which two characteristics apply to role-based CLI access superviews? (Choose two.)
- AA specific superview cannot have commands added to it directly
- BCLI views have passwords, but superviews do not have passwords.
- CA single superview can be shared among multiple CLI views.
- DDeleting a superview deletes all associated CLI views.
- EUsers logged in to a superview can access all commands specified within the associated CLI views.
2Which three types of views are available when configuring the role-based CLI access feature? (Choose three.)
- Asuperview
- Badmin view
- Croot view
- Dsuperuser view
- ECLI view
- Fconfig view
3If AAA is already enabled, which three CLI steps are required to configure a router with a specific view? (Choose three.)
- ACreate a superview using the parser view view-name command.
- BAssociate the view with the root view.
- CAssign users who can use the view.
- DCreate a view using the parser view view-name command
- EAssign a secret password to the view.
- FAssign commands to the view.
4What occurs after RSA keys are generated on a Cisco router to prepare for secure device management?
- AThe keys must be zeroized to reset Secure Shell before configuring other parameters.
- BAll vty ports are automatically configured for SSH to provide secure management.
- CThe general-purpose key size must be specified for authentication with the crypto key generate rsa general-keys moduluscommand
- DThe generated keys can be used by SSH.
5Which three statements describe limitations in using privilege levels for assigning command authorization? (Choose three.)
- ACreating a user account that needs access to most but not all commands can be a tedious process
- BViews are required to define the CLI commands that each user can access.
- CCommands set on a higher privilege level are not available for lower privilege users.
- DIt is required that all 16 privilege levels be defined, whether they are used or not.
- EThere is no access control to specific interfaces on a router.
- FThe root user must be assigned to each privilege level that is defined.
6What command must be issued to enable login enhancements on a Cisco router?
- Aprivilege exec level
- Blogin delay
- Clogin block-for
- Dbanner motd
7An administrator defined a local user account with a secret password on router R1 for use with SSH. Which three additional steps are required to configure R1 to accept only encrypted SSH connections? (Choose three.)
- AEnable inbound vty SSH sessions.
- BGenerate two-way pre-shared keys.
- CConfigure DNS on the router.
- DConfigure the IP domain name on the router.
- EEnable inbound vty Telnet sessions.
- FGenerate the SSH keys.
8 Which set of commands are required to create a username of admin, hash the password using MD5, and force the router to access the internal username database when a user attempts to access the console?
- AR1(config)# username admin password Admin01pa55
R1(config)# line con 0
R1(config-line)# login local - BR1(config)# username admin secret Admin01pa55
R1(config)# line con 0
R1(config-line)# login local - CR1(config)# username admin Admin01pa55 encr md5
R1(config)# line con 0
R1(config-line)# login local - DR1(config)# username admin password Admin01pa55
R1(config)# line con 0
R1(config-line)# login - ER1(config)# username admin secret Admin01pa55
R1(config)# line con 0
R1(config-line)# login
- AR1(config)# username admin password Admin01pa55
9Refer to the exhibit. Which statement about the JR-Admin account is true?
- AJR-Admin can issue only ping commands.
- BJR-Admin can issue show, ping, and reload commands.
- CJR-Admin cannot issue any command because the privilege level does not match one of those defined.
- DJR-Admin can issue debug and reload commands.
- EJR-Admin can issue ping and reload commands
10What is the default privilege level of user accounts created on Cisco routers?
- A0
- B15
- C1
- D16
11 Which three areas of router security must be maintained to secure an edge router at the network perimeter? (Choose three.)
- Aremote access security
- Bzone isolation
- Crouter hardening
- Doperating system security
- Eflash security
- Fphysical security
12Which recommended security practice prevents attackers from performing password recovery on a Cisco IOS router for the purpose of gaining access to the privileged EXEC mode?
- ALocate the router in a secure locked room that is accessible only to authorized personnel.
- BConfigure secure administrative control to ensure that only authorized personnel can access the router.
- CKeep a secure copy of the router Cisco IOS image and router configuration file as a backup.
- DProvision the router with the maximum amount of memory possible.
- EDisable all unused ports and interfaces to reduce the number of ways that the router can be accessed.
13Refer to the exhibit. Based on the output of the show running-config command, which type of view is SUPPORT?
- ACLI view, containing SHOWVIEW and VERIFYVIEW commands
- Bsuperview, containing SHOWVIEW and VERIFYVIEW views
- Csecret view, with a level 5 encrypted password
- Droot view, with a level 5 encrypted secret password
14A network administrator notices that unsuccessful login attempts have caused a router to enter quiet mode. How can the administrator maintain remote access to the networks even during quiet mode?
- AQuiet mode behavior can be enabled via an ip access-group command on a physical interface.
- BQuiet mode behavior will only prevent specific user accounts from attempting to authenticate.
- CQuiet mode behavior can be overridden for specific networks by using an ACL.
- DQuiet mode behavior can be disabled by an administrator by using SSH to connect.
15What is a characteristic of the Cisco IOS Resilient Configuration feature?
- AIt maintains a secure working copy of the bootstrap startup program.
- BOnce issued, the secure boot-config command automatically upgrades the configuration archive to a newer version after new configuration commands have been entered.
- CA snapshot of the router running configuration can be taken and securely archived in persistent storage.
- DThe secure boot-image command works properly when the system is configured to run an image from a TFTP server.
16What are two reasons to enable OSPF routing protocol authentication on a network? (Choose two.)
- Ato provide data security through encryption
- Bto ensure faster network convergence
- Cto ensure more efficient routing
- Dto prevent data traffic from being redirected and then discarded
- Eto prevent redirection of data traffic to an insecure link
17 Which two options can be configured by Cisco AutoSecure? (Choose two.)
- Aenable secret password
- Binterface IP address
- CSNMP
- Dsecurity banner
- Esyslog
18Which three functions are provided by the syslog logging service? (Choose three.)
- Asetting the size of the logging buffer
- Bspecifying where captured information is stored
- Cgathering logging information
- Dauthenticating and encrypting data sent over the network
- Edistinguishing between information to be captured and information to be ignored
- Fretaining captured messages on the router when a router is rebooted
19What is the Control Plane Policing (CoPP) feature designed to accomplish?
- Adisable control plane services to reduce overall traffic
- Bprevent unnecessary traffic from overwhelming the route processor
- Cdirect all excess traffic away from the route process
- Dmanage services provided by the control plane
20What is a requirement to use the Secure Copy Protocol feature?
- AAt least one user with privilege level 1 has to be configured for local authentication.
- BA command must be issued to enable the SCP server side functionality.
- CA transfer can only originate from SCP clients that are routers.
- DThe Telnet protocol has to be configured on the SCP server side.
21What is a characteristic of the MIB?
- AThe OIDs are organized in a hierarchical structure.
- BInformation in the MIB cannot be changed.
- CA separate MIB tree exists for any given device in the network.
- DInformation is organized in a flat manner so that SNMP can access it quickly.
22Which three items are prompted for a user response during interactive AutoSecure setup? (Choose three.)
- AIP addresses of interfaces
- Bcontent of a security banner
- Cenable secret password
- Dservices to disable
- Eenable password
- Finterfaces to enable
23A network engineer is implementing security on all company routers. Which two commands must be issued to force authentication via the password 1A2b3C for all OSPF-enabled interfaces in the backbone area of the company network? (Choose two.)
- Aarea 0 authentication message-digest
- Bip ospf message-digest-key 1 md5 1A2b3C
- Cusername OSPF password 1A2b3C
- Denable password 1A2b3C
- Earea 1 authentication message-digest
24What is the purpose of using the ip ospf message-digest-key key md5 password command and the area area-id authentication message-digest command on a router?
- Ato configure OSPF MD5 authentication globally on the router
- Bto enable OSPF MD5 authentication on a per-interface basis
- Cto facilitate the establishment of neighbor adjacencies
- Dto encrypt OSPF routing updates
25Which three actions are produced by adding Cisco IOS login enhancements to the router login process? (Choose three.)
- Apermit only secure console access
- Bcreate password authentication
- Cautomatically provide AAA authentication
- Dcreate syslog messages
- Eslow down an active attack
- Fdisable logins from specified hosts
Informationen
- Beschreibung
- Quiz am seguridad 2, erstellt von sergio ocam am 18/02/2020.
- Autor
- sergio ocam
- Sprache
- Español
- Aufrufe
- 0
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz