Quiz
B
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (25)
126. Which three parameters does the HTTP inspection engine use to inspect the traffic on Cisco IOS firewall? (Choose three)
- Asource address
- Bapplication
- Ctransfer encoding type
- Drequest method
- Eminimum header length
- Fdestination address
2
27. Which two statements about the RC4 algorithm are true? (Choose two)- Athe RC4 algorithm is an asymmetric key algorithm.
- Bthe RC4 algorithm is faster in computation than DES.
- Cthe RC4 algorithm cannot be used with wireless encryption protocols.
- Dthe RC4 algorithm uses variable-length keys.
- Ein the RC4 algorithm, the 40-bit key represents four characters of ASCII code.
328. Which two statements about VTP passwords are true? (Choose two)
- Athe VTP password is hashed to preserve authenticity using the MD5 algorithm.
- Bthe VTP password is encrypted for confidentiality using 3DES.
- Cthe VTP password can be configured only when the switch is in Server mode.
- Dthe VTP password is sent in the summary advertisements.
- Ethe VTP password can only be configured when the switch is in Client mode.
429. Which two are characteristics of WPA? (Choose two)
- Aintroduces a 64-bit MIC mechanism
- Buses a 40 bit key with 24-bit initialization vector
- Cmakes the use of AES mandatory
- DWPA does not allow Pre-Shared key mode.
- Eimplements a key mixing function before passing the initialization vector to the RC4 algorithm
530. To transport VXLAN traffic, which minimum MTU change, from a default MTU of 1500 bytes on the port, is required to avoid fragmentation and performance degradation?
- A1650 bytes
- B1550 bytes
- C9100 bytes
- D9114 bytes
631. Refer to the exhibit. Why is there no encrypted session between host 10.10.10.1 and 20.20.20.1?
- Aincorrect or missing group configuration on the server
- Bincorrect or missing phase 2 configuration on the server
- Cincorrect or missing Virtual-Template configuration on the server
- Dincorrect or missing phase 1 configuration on server
- Eincorrect or missing Virtual-Template configuration on the client
732. Which statement is valid regarding SGACL?
- ADynamically downloaded SGACL does not override manually configured conflicting policies.
- BSGACL is access-list bound with a range of SGTs and DGTs.
- CSGACL mapping and policies can only be manually configured.
- DSGACL is not a role-based access list.
833. Which statement about the fragmentation of IPsec packets in routers is true?
- ABy default, the router knows the IPsec overhead to add to the packet, performs a lookup if the Packet will exceed egress physical interface IP MTU after encryption, then fragments the packet before encrypting and separately encrypts the resulting IP fragments.
- BBy default if the packet size exceeds MTU of the egress physical interface, it will be dropped.
- CBy default if the packet size exceeds MTU of ingress physical interface, it will be fragmented and sent without encryption.
- DBy default, the IP packets that need encryption are first encrypted with ESP, if the resulting encrypted packet exceeds the IP MTU on the egress physical interface, the the encrypted packet is fragmented before being sent.
934. Which two statements about ISO 27001 are true? (Choose two)
- AIt was formerly known as BS7799-2.
- BIt is an Information Security Management Systems specification.
- CIt is an ISO 17799 code of practice.
- DIt is a code of practice for Informational Social Management.
- EIt is closely aligned to ISO 22000 standards.
10
35. Depending on configuration, which two behaviors can the ASA classifier exhibit when it receives unicast traffic on an interface that is shared by multiple contexts? (Choose two)- AIt is classified using the destination address of the packet using the routing table.
- BIt is classified using the destination address of the packet using the NAT table.
- CIt is classified by copying and sending the packet to all the contexts.
- DIt is classified using the destination MAC address of the packet.
- EIt is classified using the destination address of the packet using the connection table.
1138. Which encapsulation technique does VXLAN use?
- AMAC in GRE
- BMAC in UDP
- CMAC in TCP
- DMAC in MAC
1240. Which statement is true about the Cisco ASA interface monitoring?
- AIt is possible to configure a context to monitor a shared interface
- BIf the monitored interface has both IPv4 and IPv6 addresses then it cannot be monitored.
- CASA does not clear the received packets count on the monitored interface before running the tests.
- DInterfaces of the same context cannot be monitored.
1341. Which option describes the main purpose of EIGRP authentication?
- Ato allow faster convergence
- Bto avoid routing table corruption
- Cto provide redundancy
- Dto authenticate peers
1442. Which two values you must configure on the Cisco ASA firewall to support FQDN ACL? (Choose two)
- Aa DNS server
- Ba service object
- Ca service policy
- Da class map
- Ean FQDN object
- Fa policy map
1543. Refer to the exhibit. Which two statements about this debug output are true? (Choose two)
- A192.168.10.1 is the local VPN address.
- B69.1.1.2 is the local non mutable address.
- CThis debug output represents a failed NHRP request.
- DThe request is from NHC to NHS.
- E192.168.10.2 is the remote NBMA address.
- FThe request is from NHS to NHC.
1644. Which two statements about the ISO are true? (Choose two)
- ACorrespondent bodies are small countries with their own standards organization.
- BSubscriber members are individual organizations.
- COnly member bodies have voting rights.
- Dthe ISO has three membership categories: Member, Correspondent, and Subscribers.
- Ethe ISO is a government-based organization.
1745. Attacks can originate from multicast receivers. Any receivers that sends an IGMP or MLD report typically creates state on which router?
- Asource
- BRP
- Cfirst-hop
- Dcustomer
1846. Refer to the exhibit. Which configuration prevents R2 from becoming a PIM neighbor with R1?
- AAccess-list 10 deny 192.168.1.2 0.0.0.0
Interface gi0/0
Ip pim neighbor-filter10 - BAccess-list 10 permit 192.168.1.2 0.0.0.0
Interface gi0/0
Ip pim neighbor-filter10 - CAccess-list 10 deny 192.168.1.2 0.0.0.0
Interface gi0/0
Ip igmp access-group 10 - DAccess-list 10 deny 192.168.1.2 0.0.0.0
Interface gi0/0
Ip pim neighbor-filter1
- AAccess-list 10 deny 192.168.1.2 0.0.0.0
1947. Which statement is true about the PKI deployment using Cisco IOS devices?
- ADuring the enrollment, CA or RA signs the client certificate request with its public key.
- BRA is capable to publish the CRLs.
- CCertificate Revocation is not supported by SCEP protocol.
- DRA is used for accepting the enrollment requests.
- EPeers use private keys in their certificates to negotiate IPSec SAs to establish the secure channel.
2048. Which statement about the Cisco Secure ACS Solution Engine TACACS+ AV pair is true?
- AAV pairs are of two types: sting and integer.
- BAV pairs must be enabled only on Cisco Secure ACS for successful implementation.
- CAV pairs are only string values.
- Dthe Cisco Secure ACS Solution Engine does not support accounting AV pairs.
2149. Of which IPS application is Event Store a component?
- AMainApp
- BInterfaceApp
- CAuthenticationApp
- DNotificationApp
- ESensorApp
2250. for what reason has the IPv6 Type 0 Routing Header been recommended for deprecation?
- AAttackers can exploit its functionality to generate DoS attacks.
- BIt can create a black hold when used in combination with other routing headers.
- CWhen Type 0 traffic is blocked by a firewall policy, all other traffic with routing headers is dropped automatically
- DIt can conflict with ingress filtering.
2351. In the IPv6 address 2001:DB8:130E::870:0:140B/64, which portion is the IPv6 interface identifier?
- A2001:DB8:130F:0:
- B0:870:0:140B
- C870:0:140B
- D2001:DB8:130F
2452. Which two statements about RFC 2827 are true? (Choose two)
- AA corresponding practice is documented by the IETF in BCP 84.
- Bit defines ingress packet filtering to defeat DoS that uses IP spoofing.
- Cit defines ingress packet filtering for the multihomed network.
- Dit is endorsed by the IETF in BCP 38.
- Eit defines egress packet filtering to safeguard against IP spoofing.
2553. Refer to the exhibit. Which two statements correctly describe the debug output? (Choose two)
- AThe message is observed on the NHS
- Bthe NHRP hold time is 3 hours
- CThe local non-routable address is 20.10.10.3
- DThe message is observed on the NHC
- EThe remote routable address 91.91.91.1
- FThe remote VPN address is 180.10.10.1
Information
- Description
- rookieyeyey blabenderus Quiz on B, created by vuesecure vuesec on 03/02/2016.
- Author
- vuesecure vuesec
- Language
- Deutsch
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz