Page 31 of 60 · 1182 total questions.
When a WPA2-PSK WLAN is configured in the Wireless LAN Controller, what is the minimum number of characters that is required in ASCII format?
The correct answer is B. Option B: 8
What mechanism carries multicast traffic between remote sites and supports encryption?
The correct answer is D. Option D: GRE over IPsec This option keeps traffic private / properly secured as required.
Refer to the exhibit. An access-list is required to permit traffic from any host on interface Gi0/0 and deny traffic from interface Gi0/1. Which access list must be applied?
The correct answer is A. Option A: ip access-list standard 99 permit 10.100.100.0 0.0.0.255 deny 192.168.0.0 0.0.255.255
Refer to the exhibit. Which two commands must be configured on router R1 to enable the router to accept secure remote-access connections? (Choose two.)
The correct answer is A, C. Option A: ip ssh pubkey-chain Option C: crypto key generate rsa
Explanation
SSH provides encrypted remote CLI administration and should replace insecure Telnet. This option keeps traffic private / properly secured as required.
Which service is missing when RADIUS is selected to provide management access to the WLC?
The correct answer is D. Option D: confidentiality
Which action implements physical access control as part of the security program of an organization?
The correct answer is A. Option A: setting up IP cameras to monitor key infrastructure This option keeps traffic private / properly secured as required.
Which field within the access-request packet is encrypted by RADIUS?
The correct answer is B. Option B: password This option keeps traffic private / properly secured as required.
A Cisco engineer is configuring a factory-default router with these three passwords: • The user EXEC password for console access is p4ssw0rd1. • The user EXEC password for Telnet access is s3cr3t2. • The password for privileged EXEC mode is priv4t3p4ss. Which command sequence must the engineer configure?
The correct answer is B. Option B: enable secret priv4t3p4ss ! line con 0 password p4ssw0rd1 login ! line vty 0 15 password s3cr3t2 login
How does MAC learning function?
The correct answer is D. Option D: adds unknown source MAC addresses to the CAM table
Explanation
OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.
What is a function of Opportunistic Wireless Encryption in an environment?
The correct answer is B. Option B: protect traffic on open networks This option keeps traffic private / properly secured as required.
Refer to the exhibit. Clients on the WLAN are required to use 802.11r. What action must be taken to meet the requirement?
The correct answer is D. Option D: Set the Fast Transition option to Enable and enable FT 802.1X under Authentication Key Management.
Refer to the exhibit. What must be configured to enable 802.11w on the WLAN?
The correct answer is C. Option C: Set PMF to Required.
Which encryption method is used by WPA3?
The correct answer is B. Option B: AES This option keeps traffic private / properly secured as required.
Which type of traffic is sent with pure IPsec?
The correct answer is C. Option C: unicast messages from a host at a remote site to a server at headquarters
How does authentication differ from authorization?
The correct answer is B. Option B: Authentication verifies the identity of a person accessing a network, and authorization determines what resource a user can access.
An engineer has configured the domain name, user name, and password on the local router. What is the next step to complete the configuration for a Secure Shell access RSA key?
The correct answer is B. Option B: crypto key generate rsa This option keeps traffic private / properly secured as required.
Which type if network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?
The correct answer is A. Option A: SYN flood
Which two components comprise part of a PKI? (Choose two.)
The correct answer is B, D. Option B: one or more CRLs Option D: CA that grants certificates
After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply to accomplish this task?
The correct answer is D. Option D: username localuser secret plaintextpassword line con 0 login authentication default privilege level 15 This option keeps traffic private / properly secured as required.
Which wireless security protocol relies on Perfect Forward Secrecy?
The correct answer is D. Option D: WPA3
Explanation
WPA3 strengthens wireless authentication, including SAE for personal networks. This option keeps traffic private / properly secured as required.
Showing questions 601–620 of 1182 · Page 31 of 60