Page 30 of 60 · 1182 total questions.
Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computers must be able to access the web server. Which configuration when applied to switch A accomplishes the task? A. B. C. D.
The correct answer is D. Option D:
In which two ways does a password manager reduce the chance of a hacker stealing a user's password? (Choose two.)
The correct answer is A, E. Option A: It encourages users to create stronger passwords Option E: It protects against keystroke logging on a compromised device or web site
Which goal is achieved by the implementation of private IPv4 addressing on a network?
The correct answer is A. Option A: provides an added level of protection against Internet exposure This option keeps traffic private / properly secured as required.
Which type of attack is mitigated by dynamic ARP inspection?
The correct answer is C. Option C: man-in-the-middle
What is a function of a remote access VPN?
The correct answer is D. Option D: allows the users to access company internal network resources through a secure tunnel
What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two.)
The correct answer is D, E. Option D: implement port-based authentication Option E: shut down unused ports
Refer to the exhibit. A network administrator must permit SSH access to remotely manage routers in a network. The operations team resides on the 10.20.1.0/25 network. Which command will accomplish this task?
The correct answer is D. Option D: no access-list 2699 deny ip any 10.20.1.0 0.0.0.255
A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded. Which command must be configured to increment the security-violation count and forward an SNMP trap?
The correct answer is C. Option C: switchport port-security violation restrict
Explanation
REST APIs commonly manipulate resources over HTTP using methods such as GET, POST, PUT, PATCH, and DELETE. This option keeps traffic private / properly secured as required.
What is a practice that protects a network from VLAN hopping attacks?
The correct answer is C. Option C: Change native VLAN to an unused VLAN ID
Explanation
Frames in the native VLAN are untagged by default on an 802.1Q trunk. A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure. NAT translates addresses between network domains, commonly conserving public IPv4 addresses.
Where does a switch maintain DHCP snooping information?
The correct answer is D. Option D: In the binding database
A network administrator must configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?
The correct answer is D. Option D: R1#enable R1#configure terminal R1(config)#ip domain-name cisco.com R1(config)#crypto key generate rsa modulus 1024 This option keeps traffic private / properly secured as required.
When a WLAN with WPA2 PSK is configured in the Wireless LAN Controller GUI, which format is supported?
The correct answer is A. Option A: decimal
Refer to the exhibit. A network administrator has been tasked with securing VTY access to a router. Which access-list entry accomplishes this task?
The correct answer is D. Option D: access-list 101 permit tcp 10.1.1.0 0.0.0.255 172.16.1.0 0.0.0.255 eq ssh
Explanation
SSH provides encrypted remote CLI administration and should replace insecure Telnet.
Which two protocols must be disabled to increase security for management connections to a Wireless LAN Controller? (Choose two.)
The correct answer is C, D. Option C: HTTP Option D: Telnet This option keeps traffic private / properly secured as required.
Which security program element involves installing badge readers on data-center doors to allow workers to enter and exit based on their job roles?
The correct answer is A. Option A: physical access control This option keeps traffic private / properly secured as required.
Which function is performed by DHCP snooping?
The correct answer is B. Option B: rate-limits certain traffic
Which protocol is used for secure remote CLI access?
The correct answer is D. Option D: SSH
Explanation
SSH provides encrypted remote CLI administration and should replace insecure Telnet. This option keeps traffic private / properly secured as required.
Which implementation provides the strongest encryption combination for the wireless environment?
The correct answer is D. Option D: WPA2 + AES
Explanation
WPA2 uses AES-based CCMP to protect wireless traffic. This option keeps traffic private / properly secured as required.
What does physical access control regulate?
The correct answer is A. Option A: access to networking equipment and facilities
A network engineer is asked to configure VLANS 2, 3, and 4 for a new implementation. Some ports must be assigned to the new VLANS with unused ports remaining. Which action should be taken for the unused ports?
The correct answer is C. Option C: configure ports in a black hole VLAN
Explanation
A VLAN creates a separate Layer 2 broadcast domain on switched infrastructure.
Showing questions 581–600 of 1182 · Page 30 of 60