Quiz
CCNA Security v3.0
Questions in this quiz (20)
11.Which NAT type allows only objects or groups to reference an IP address?
- AA. Dynamic NAT
- BB. Dynamic PAT
- CC. Identity NAT
- DD. Static NAT
22. Which of these are characteristics of DHCP spoofing? (Choose three)
- AA. ARP poisoning
- BB. Physically modify the network gateway
- CC. Can access most network devices
- DD. Protect the identity of the attacker by masking their DHCP address
- EE. Man-in-the-middle attack
- FF. Modify traffic in transit
33. Which NAT option is executed first in the case of multiple NAT translations?
- AA. Static NAT with shortest prefix
- BB. Static NAT with longest prefix
- CC. Dynamic NAT with shortest prefix
- DD. Dynamic NAT with longest prefix
44. How can firepower block malicious email attachments?
- AA. It forwards email requests to an external signature engine
- BB. It scans inbound email messages for known bad URLs
- CC. It sends an alert to the administrator to verify suspicious email messages
- DD. It sends the traffic through a file policy
55. Which firewall configuration must you perform to allow traffic to flow in both directions between two zones?
- AA. Configure a single zone pair that allows bidirectional traffic flows from any zone except the self-zone
- BB. Configure two zone pairs, one for each direction
- CC. Configure a single zone pair that allows bidirectional traffic flows from any zone
- DD. Configure a single zone pair that allows bidirectional traffic flows only if the source zone is the less secure zone
66. What mechanism does asymmetric cryptography use to secure data?
- AA. An MD5 hash
- BB. A public/private key pair
- CC. An RSA nonce
- DD. Shared secret keys
77. Which statement about IOS privilege levels is true?
- AA. Each privilege level is independent of all other privilege levels
- BB. Each privilege level supports the commands at its own level and all levels above it
- CC. Privilege-level commands are set explicitly for each user
- DD. Each privilege level supports the commands at its own level and all levels below it
88. Your security team has discovered a malicious program that has been harvesting the CEO's email messages and the company's user database for the last 6 months. What type of attack did your team discover? (Choose two)
- AA. Social activism
- BB. Targeted malware
- CC. Drive-by spyware
- DD. Polymorphic virus
- EE. Advanced persistent threat
99. What is a valid implicit permit rule for traffic that is traversing the ASA firewall?
- AA. Unicast IPv6 traffic from a higher security interface to a lower security interface is permitted in transparent mode only
- BB. Only BPDUs from a higher security interface to a lower security interface are permitted in routed mode
- CC. Unicast IPv4 traffic from a higher security interface to a lower security interface is permitted in routed mode only
- DD. Only BPDUs from a higher security interface to a lower security interface are permitted in transparent mode
- EE. ARPs in both directions are permitted in transparent mode only
1010. What is the effect of the following command: “Crypto ipsec transform-set my set esp-md5-hmac esp-aes-256”
- AA. It configures encryption to use MD5 HMAC
- BB. It configures authentication to use MD5 HMAC
- CC. It configures encryption to use AES-256
- DD. It configured authentication to use AES-256
- EE. It configures authorization to use AES-256
1111. Which of the following statements about access lists are true? (Choose three)
- AA. Extended access lists should be placed as near as possible to the destination
- BB. Standard access lists should be placed as near as possible to the source
- CC. Extended access lists should be placed as near as possible to the source
- DD. Standard access lists should be placed as near as possible to the destination
- EE. Standard access lists filter on the source address
- FF. Standard access lists filter on the destination address
1212. In which two situations should you use in-band management? (Choose two)
- AA. When a network device fails to forward packets
- BB. When management applications need concurrent access to the device
- CC. When you require administrator access from multiple locations
- DD. When you require ROMMON access
- EE. When the control plane fails to respond
1313. In which two situations should you use out-of-band management? (Choose two)
- AA. When a network device fails to forward packets
- BB. When management applications need concurrent access to the device
- CC. When you require administrator access from multiple locations
- DD. When you require ROMMON access
- EE. When the control plane fails to respond
1414. Which command enable ospf authentication?
- AA. ip ospf authentication message-digest
- BB. network 192.168.10.0 0.0.0.255 area 0
- CC. area 20 authentication message-digest
- DD. ip ospf message-digest-key 1 md5 CCNA
1515.Which command help user1 to use enable,disable,exit&etc commands?
- AA. catalyst1(config)#username user1 privilege 0 secret us1pass
- BB. catalyst1(config)#username user1 privilege 1 secret us1pass
- CC. catalyst1(config)#username user1 privilege 2 secret us1pass
- DD. catalyst1(config)#username user1 privilege 5 secret us1pass
1616. Command ip ospf authentication key 1 is implemented in which level?
- AA. Interface
- BB. process
- CC. global
- DD. enable
1717. Which line in the following OSPF configuration will not be required for MD5 authentication to work?
ip address 192.168.10.1 255.255.255.0
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 CCNA
!
router ospf 65000
router-id 192.168.10.1
area 20 authentication message-digest
network 10.1.1.0 0.0.0.255 area 10
network 192.168.10.0 0.0.0.255 area 0- AA. ip ospf authentication message-digest
- BB. network 192.168.10.0 0.0.0.255 area 0
- CC. area 20 authentication message-digest
- DD. ip ospf message-digest-key 1 md5 CCNA
1818. Which of the following pairs of statements is true in terms of configuring MD authentication?
- AA. Interface statements (OSPF, EIGRP) must be configured; use of key chain in OSPF
- BB. Router process (OSPF, EIGRP) must be configured; key chain in EIGRP
- CC. Router process (only for OSPF) must be configured; key chain in EIGRP
- DD. Router process (only for OSPF) must be configured; key chain in OSPF
1919. which are two valid TCP connection states (pick 2) is the gist of the question?
- AA. SYN-RCVD
- BB. Closed
- CC. SYN-WAIT
- DD. RCVD
- EE. SENT
2020. What is example of social engineering?
- AA. Gaining access to a building through an unlocked door.
- BB. something about inserting a random flash drive.
- CC. gaining access to server room by posing as IT
- DD. Watching other user put in username and password (something around there)
Information
- Description
- Some of the new questions
- Author
- Mohamed Yuosef
- Language
- English
- Views
- 352
- Rating
- 4.0 out of 5 · 1 rating Rate this quiz