A

1. 11. Which two options describe how the traffic for the shared interface is classified in ASA multicontext
   mode? (Choose two)

   1. Aby copying and sending the packet to all the contexts
   2. Bat the destination address in the context
   3. Cby sending the MAC address for the shared interface
   4. Dat the destination address in the packet
   5. Eat the source address in the packet
2. 22. Which statement about DNS is true?

   1. AIn the DNS header, the Rcode value is set to 0 for format error.
   2. BThe client-server architecture is based on push-pull messages.
   3. CQuery and response messages have different format.
   4. DIn the DNS header, an Opcode value of 2 represents a server status request.
   5. EIn the DNS message header, the QR flag set to 1 indicates a query.
3. 3 3. Refer to the exhibit. Which option describes the behavior of this configuration?

   

   1. AAn initial warning message is displayed when 80 prefixes are received. A different message is
      displayed when 1000 prefixes are received and the session is not disconnected.
   2. BThe peer session is dropped when 800 prefixes are received.
   3. CA warning message is displayed when 1000 prefixes are received.
   4. DAn initial warning message is displayed when 80 prefixes area received. The same warning
      message is displayed when 1000 prefixes area received and the session is disconnected.
   5. EThe peer session is dropped when 80 prefixes are received.
4. 44. What is the default duration of IPS anomaly detection's learning accept mode?

   1. A24 hours
   2. B48 hours
   3. C12 hours
   4. D8 hours
5. 55. Which three statements about SSH v1 and SSHv2 are true? (Choose three)

   1. ABoth SSH v1 and SSHv2 require a server key to protect the session key.
   2. BSSHv2 supports a wider variety of user authentication methods than SSH v1.
   3. Cunlike SSHv1, SSHv2 uses separate protocols for authentication, connection, and transport.
   4. Dunlike SSHv1, SSHv2 support multiple forms of user authentication in a single session.
   5. EBoth SSHv1 and SSHV2 negotiate the bulk cipher.
   6. FBoth SSHv1 and SSHv2 support multiple session channels on a single connection.
6. 66. Which two statements about the BGP backdoor feature are true? (Choose two)

   1. AIt changes the eBGP administrative distance from 20 to 200.
   2. BIt makes iBGP learned routes preferred over IGP learned routes.
   3. CIt makes IGP learned routes preferred over eBGP learned routes.
   4. DIt changes the iBGP administrative distance from 200 to 20.
   5. EIt makes eBGP learned routes preferred over IGP learned routes.
   6. FIt changes the eBGP administrative distance from 200 to 20.
7. 77. Which Cisco IOS IPS signature action denies an attacker session using the dynamic access list?

   1. Adeny-connection-inline
   2. Bdeny-packet-inline
   3. Cdeny-attacker-inline
   4. Dreset-tcp-action
   5. Eproduce-alert
   6. Fdeny-session-inline
8. 88. Which of these is an invalid syslog facility?

   1. A0
   2. B31
   3. C1
   4. D12
9. 99. What is the range of valid stratum numbers for NTP when configuring a Cisco IOS device as an
   authoritative NTP server?

   1. A1 to 16
   2. B1 to 15
   3. C0 to 16
   4. D0 to 4
10. 1010. Which set of encryption algorithms is used by WPA and WPA2?

    1. ATKIP and AES
    2. BBlowfish and AES
    3. CCAST and RC6
    4. DTKIP and RC6

11. 1111. Which two statements about NHRP are true? (Choose two)

    1. ATraffic between two NHCs always flows through the NHS.
    2. BNHRP allows NHS to dynamically learn the mapping of VPN IP to BMA IP.
    3. CNHRP allows NHC to dynamically learn the mapping of VPN IP to NBMA IP.
    4. DNHRP provides Layer-2 to Layer 3 address mapping.
    5. ENHC must register with NHS.
    6. FNHRP is used for broadcast multi-access networks.
12. 1212. Which of the following statement is true about the ARP Spoofing attack?

    1. AAttacker sends the ARP request with the MAC address and IP address of a legitimate resource
       in the network.
    2. BAttacker sends the ARP request with its own MAC address and IP address of a legitimate
       resource in the network.
    3. CAttacker sends the ARP request with the MAC address and IP address of its own.
    4. DARP spoofing does not facilitate man-in-the middle attack for the attacker.
13. 1313. For which reason would an RSA key pair needs to be removed?

    1. Athe CA has suffered a power outage
    2. BPKI architecture would never allow the RSA key pair removal
    3. CThe existing CA is replaced, and the new CA requires newly generated keys
    4. Dthe CA is under DoS attack
14. 1414. Which statement describes the computed authentication data in the AH protocol?

    1. AIt is sent to the peer.
    2. BIt is part of a new IP header.
    3. CIt provides integrity only for the new IP header.
    4. DIt is part of the original IP header.
15. 1515. Which statement is true regarding transparent mode configuration on Cisco ASA firewall running version 9?

    1. ANetworks connected with the ASA data interfaces must be in different subnets for the traffic to flow.
    2. BYou need to make management interface of the ASA as the next-hop for the connected devices to establish.
    3. CDefault route defined on the ASA is only for the management traffic return path.
    4. DManagement interface does not update the MAC address table.
    5. EBridge Groups are not supported in transparent mode.
16. 1616. What are two enhancements in WCCP V2.0 over WCCP V1.0? (Choose two)

    1. Aauthentication support
    2. Bmulticast support
    3. Cencryption support
    4. DIPv6 support
    5. Esupport for HTTP redirection
17. 1717. Which three items does TLS rely on to prove identity? (Choose three)

    1. Apassword
    2. BTrustpoint
    3. Cprivate keys
    4. Dcertificates
    5. Epublic keys
    6. Fusername
18. 1818. Refer to the exhibit. Against which type of attack does the given configuration protect?

    

    1. Aa botnet attack
    2. Bpharming
    3. Cphishing
    4. DDNS hijacking
    5. EDNS cache poisoning
19. 1919. Which two statements about IPv6 path MTU discovery are true? (Choose two)

    1. AIf the source host receives an ICMPv6 Packet Too Big message from a router, it reduces its
       path MTU.
    2. BDuring the discovery process, the DF bit is set to 1.
    3. CIf the destination host receives an ICMPv6 Packet Too Big message from a router, it reduces
       its path MTU.
    4. DIt can allow fragmentation when the minimum MTU is below a configured value.
    5. EThe initial path MTU is the same as the MTU of the original node's link layer interface.
    6. FThe discovery packets are dropped if there is congestion on the link.
20. 2020. Which MAC address control command enables usage monitoring for a CAM table on a switch?

    1. Amac-address-table learning
    2. Bmac-address-table synchronize
    3. Cmac-address-table limit
    4. Dmac-address-table secure
    5. Emac-address-table notification threshold
21. 2121. Refer to the exhibit. Which three descriptions of the configuration are true? (Choose three)

    

    1. AThe tunnel encapsulates multicast traffic.
    2. BThe tunnel provides data confidentiality.
    3. CThis tunnel is a point-to-point GRE tunnel.
    4. DThe configuration is on the NHS.
    5. EThe tunnel is not providing peer authentication.
    6. FThe tunnel IP address represents the NBMA address.
    7. GThe configuration is on the NHC.
22. 2222. Refer to the exhibit. What is the purpose of the command in the NAT PT for IPv6 implementation on a Cisco IOS device?

    

    1. AIt defines the IPv4 address pool used by the NAT-PT for dynamic address mapping.
    2. BIt defines the IPv6 address pool used by the NAT-PT for dynamic address mapping.
    3. CIt defines the IPv4 address pool used by the NAT-PT for static address mapping.
    4. DIt defines address pool used by the IPv6 access-list.
    5. EIt defines address pool used by the IPv4 access-list.
23. 2323. What technology can secure DNS information in IP networks?

    1. ADNSSEC
    2. Ba combination of DNS and SSL/TLS
    3. Ca combination of DNS and IPSec
    4. DDNS encryption
24. 2424. Refer to the exhibit. Why is there no encrypted session between host 10.10.10.1 and 20.20.20.1?

    

    1. Aincorrect or missing Virtual-Template configuration on the server
    2. Bincorrect or missing Virtual-Template configuration on the client
    3. Cincorrect or missing phase 1 configuration on server
    4. Dincorrect or missing group configuration on the server
    5. Eincorrect or missing phase 2 configuration on the server
    6. Fincorrect or missing group configuration on the client
25. 2525. An RSA key pair consists of a public key and a private key and is used to set up PKI. Which statement applies to RSA and PKI?

    1. AIt is possible to determine the RSA key-pair private key from its corresponding public key
    2. Bthe RSA key-pair is a symmetric cryptography
    3. CWhen a router that does not have an RSA key pair requests a certificate, the certificate request
       is sent, but a warning is shown to generate the RSA key pair before a CA signed certificate is
       received.
    4. DThe public key must be included in the certificate enrollment request

Beschreibung

rookieyeyey blabenderus Quiz am A, erstellt von vuesecure vuesec am 03/02/2016.

Autor

vuesecure vuesec

Sprache

Deutsch

Aufrufe

0

Schlagwörter

blabenderusrookieyeyey

Bewertung

Noch keine Bewertungen

Bewerte dieses Quiz

Bewerte dieses Quiz

Mehr zu Firewalls and Access Control Lists