Flashcards
Cisco Security Test
Flashcards do conjunto (57)
- 1Which item is the great majority of software vulnerabilities that have been discovered?Buffer overflow
- 2With which three tasks does the IPS Policies Wizard help you?-Selecting the Interface to which the IPS rule will be applied
-Selecting the direction of traffic that will be inspected
-Selecting the Signature Definition File (SDF) that the router will use - 3When editing global IPS settings, which one determines of the IOS-bases IPS features will drop or permit traffic for a particular IPS signature engine while new signature for that engine is being compiled?Enable Engine Fall Closed
- 4Which three options are network evaluation techniques? (choose three)-Scanning a network for active IP addresses and open ports on those IP addresses
-Using password-cracking utiliies
-performing virus scans - 5The enable secret password appears as an MD5 hash in a router's configuration file, whereas the enable password is not hashed or encrypted, if the password-encryption service is not enabled. What is the reason that Cisco still supports the use of both enable secret and enables passwords in a router's configuration?The enable password is present for backwards compatibility
- 6On the basis of the description of SSL-based VPN, place the correct description in the proper locations?-The authentication process uses hashing technologies
-asymmetric algorithms are used for authentication and key exchange
-Symmetric algorithm are used for bulk encryption - 7Please choose the correct matching relationship between the cryptography algorithms and the type of algorithm?3DES-Symmetric
RSA-Asymmetric
DH-Asymmetric
AES-Symmetric
IDEA-Symmetric
Elliptical Curve-Asymmetric - 8When using the Cisco SDM Quick Setup Site to Site VPN wizard, which three parameters do you configure?-interface for the VPN connection
-IP address or the remote peer
-Source interface where encrypted traffic originates - 9Based on the username global configuration mode command displayed in the exhibit. What does the option secret 5 indicate about the enable secret password? show run | i username username test secret 5 $1$knm.$*$*!@it is hashed using MD5
- 10For the following statements, which one is perceived as a drawback of implementing Fibre Channel Authentication Protocol (FCAP)It relies on an underlying Public Key Infrastructure (PKI)
- 11Which two primary port authentication protocols are used with VSANs? (choose two)-CHAP
-DHCHAP - 12You work as a network engineer, do you know an IPSEC tunnel is negotiated within the protection of which type of tunnel?ISAKMP tunnel
- 13Which option ensures that data is not modified in transit?Integrity
- 14What is the objective of Diffie Hellman?Used to establish a symmetric shared key via a public key exchange process
- 15Which description about asymmetric encryption algorithm is correct?They use different keys for encryption and decryption of data
- 16Regarding construction a good encryption algorithm what does creating an avalanche effect indicate?Changing only a few bits of a plain-text message causes the cipher-text to be completely different
- 17Stream ciphers run on a which of the following?Individual digits, one at a time, with the transformation varying during the encryption
- 18Which description is true about ECB mode?ECB mode uses the same 56-bit key to serially encrypt each 64-bit plain-text block
- 19For the following items, which one can be used to authenticate the IPSEC peers during IKE Phase 1?pre-shared key
- 20In a brute-force attack, what percentage of the keyspace must an attacker generally search through until he or she finds the key that decrypts the data?Roughly 50%
- 21Which statement is not a reason for an organization to incorporate a SAN in its enterprise infrastructure?To decrease the threat of viruses and worm attacks against data storage devices
- 22Which example is of function intended for cryptographic hashing?MD5
- 23Which of the following items may be added to a password stored in MD5 to make it more secure?SALT
- 24What is the MD5 algorithm used for?takes a variable-length message produces a 128-bit message digest
- 25Which algorithm was the first to be found suitable for both digital signature and encryption?RSA
- 26Observe the following options carefully, which two attacks focus on RSA?-BPA attacks
-Adaptive chosen cipher-text attack - 27Before Diffie-Hellman exchange may begin, the two parties involved must agree on what?Two non-secret numbers
- 28which item are the correct matching relationships associated with IKE Phase?-Perform a Diffie-Hellman exchange-P1
-Establish IPSEC SAs-P2
Negotiate IPSEC security Policy-P2
Negotiate IKE policy sets and auth peer-P1
perform an optional Diffie-Hellman exchange-P2 - 29Which three are distinctions between asymmetric and symmetric algorithm?(choose all that apply)-Asymmetric algorithms are based on more complex mathematical computations
-Only asymmetric algorithms have a key exchange technology built in
-Asymmetric algorithms are used quite often as key exchange protocols for symmetric algorithms - 30For the following statements, which on is the strongest symmetrical encryption algorithm?AES
- 31Which statement is true about a certificate authority (CA)?A trusted third party responsible for signing the public keys of entities in a PKI based system
- 32With the increasing development of various network attacks. Which statement best describes the relationship between the attack method and the result?-Identify operating system-Port scan
-Determine live hosts-Ping sweep
Determine potential vulnerable-Port scan
Identity devices-Ping sweep
Identity active services-Port scan - 33Which public key cryptographic standards (PKCS) defines the syntax for encrypted messages and messages with digital signatures?PKCS #7
- 34Which two functions are required for IPSEC operation? (choose two)-Using DH to establish a shared-secret key
-Using IKE to negotiate the SA - 35For the following items, which one acts as a VPN termination device and is located at a primary network location?Headend VPN device
- 36Which protocol will use a LUN as a way to differentiate the individual disk drives that comprise a target device?SCSI
- 37Which VOIP component can permit or deny a call attempt on a the basis of a network's available bandwidth?Gatekeeper
- 38Which statement is true about Vishing?Influencing users to provide personal information over the phone
- 39Which two statements are correct regarding a Cisco IP phone's web access feature? (choose two)-It is enabled by default
-It can provide IP address information about other servers in the network - 40Which classes does the U.S government place classified data into?Confidential
Secret
Top-Secret - 41As a candidate for CCNA examination, when you are familiar with the basic commands, if you input the command "enable secret level 5 password" in the global mode, what does it include?The enable secret password is for accessing exec privilege level 5
- 42Which three items are Cisco best-practice recommendations for securing a network? (choose three)-Routinely apply patches to operating systems and apps
-Disable unneeded services and ports on hosts
-Require strong passwords, and enable password expiration - 43For the following options, which on accurately matches the CLI commands to the equivalent SDM wizard that performs similar configuration functions?Auto secure Exec commands and the SDM one-step lockdown wizard
- 44How does CLI view differ from a privilege level?A CLI view supports only commands configured for that specific view, whereas a privilege level supports commands available to that level and all lower levels.
- 45When configuring Cisco IOS login enhancements for virtual connections, what is the "quiet period"?The period of time in which virtual login attempts are blocked, following repeated failed login attempts
- 46Which Three statements are valid SDM configuration wizards? (choose three)STP
Security Audit
NAT - 47which is true about the show login command output displayed in the exhibit?Three or more login request have failed within the last 100 seconds
- 48For the following items, which management topology keeps management traffic from production traffic?OOB
- 49Which Method is of gaining access to a system that bypasses normal security measures?Creating a backdoor
- 50if you click the configure button along the top of Cisco SDMs graphical interface, which tasks button permits you to configure such features as SSH, NTP, SNMP and syslog?Additional Tasks
- 51Which one of the Cisco IOS commands can be used to verify that either the Cisco IOS image, the configuration files, or both have been properly backed up and secured?show secure bootset
- 52What is the purpose of the secure boot-config global configuration?takes a snapshot of the router running configuration and securely archives it in persistent storage
- 53What Cisco security agent interceptor is in charge of intercepting all read/write request to the rc files in UNIX?Configuration interceptor
- 54When configuring role-based CLI on a Cisco router which action will be taken first?enable the root view on the router
- 55What will be disabled as a result of the no service password recovery command?ROMMON
- 56Which statement is true about a smurf attack?It sends ping request to a subnet, requesting that devices on that subnet send ping replies to a target
- 57Examine the following items, which one offers a variety of security solutions, including firewall IPS, VPN, antispyware, antivirus and antiphishing features?Cisco ASA 5500 series security appliace
Informações
- Descrição
- FlashCards sobre Cisco Security Test, criado por john-e.m em 04-09-2014.
- Criado por
- john-e.m
- Visualizações
- 37
- Avaliação