🔍

200-301 — questions

Page 32 of 60 · 1182 total questions.

200-301 Question 677

Single page →
Topic 1 · Question 677

What is a zero-day exploit?

  • AIt is when the network is saturated with malicious traffic that overloads resources and bandwidth.
  • BIt is when an attacker inserts malicious code into a SQL server.
  • CIt is when a new network vulnerability is discovered before a fix is available. (correct answer)
  • DIt is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: It is when a new network vulnerability is discovered before a fix is available.

200-301 Question 678

Single page →
Topic 1 · Question 678 · Select all that apply

A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing. Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

  • Atransport input ssh (correct answer)
  • Btransport input all
  • Ccrypto key generate rsa modulus 2048 (correct answer)
  • Dcrypto key generate rsa general-keys modulus 1024
  • Ecrypto key generate rsa usage-keys
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: transport input ssh Option C: crypto key generate rsa modulus 2048

Explanation

SSH provides encrypted remote CLI administration and should replace insecure Telnet. This option keeps traffic private / properly secured as required.

200-301 Question 679

Single page →
Topic 1 · Question 679 · Select all that apply

What are two examples of multifactor authentication? (Choose two.)

  • Asingle sign-on
  • Bsoft tokens (correct answer)
  • Cpasswords that expire
  • Dshared password repository
  • Eunique user knowledge (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: soft tokens Option E: unique user knowledge

200-301 Question 680

Single page →
Topic 1 · Question 680

Which characteristic differentiates the concept of authentication from authorization and accounting?

  • Aconsumption-based billing
  • Bidentity verification (correct answer)
  • Cuser-activity logging
  • Dservice limitations
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: identity verification

200-301 Question 681

Single page →
Topic 1 · Question 681

What is a function of Cisco Advanced Malware Protection for a Next-Generation IPS?

  • Ainspecting specific files and file types for malware (correct answer)
  • Bauthorizing potentially compromised wireless traffic
  • Cauthenticating end users
  • DURL filtering
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: inspecting specific files and file types for malware

200-301 Question 682

Single page →
Topic 1 · Question 682

What is a feature of WPA?

  • ATKIP/MIC encryption (correct answer)
  • Bsmall Wi-Fi application
  • Cpreshared key
  • D802.1x authentication
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: TKIP/MIC encryption

200-301 Question 683

Single page →
Topic 1 · Question 683 · Select all that apply

Which two practices are recommended for an acceptable security posture in a network? (Choose two.)

  • AUse a cryptographic keychain to authenticate to network devices.
  • BPlace internal email and file servers in a designated DMZ.
  • CBack up device configurations to encrypted USB drives for secure retrieval.
  • DDisable unused or unnecessary ports, interfaces, and services. (correct answer)
  • EMaintain network equipment in a secure location. (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Disable unused or unnecessary ports, interfaces, and services. Option E: Maintain network equipment in a secure location. This option keeps traffic private / properly secured as required.

200-301 Question 684

Single page →
Topic 1 · Question 684

How does WPA3 improve security?

  • AIt uses SAE for authentication. (correct answer)
  • BIt uses RC4 for encryption.
  • CIt uses TKIP for encryption.
  • DIt uses a 4-way handshake for authentication.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: It uses SAE for authentication. This option keeps traffic private / properly secured as required.

200-301 Question 685

Single page →
Topic 1 · Question 685

What is a function of a Next-Generation IPS?

  • Acorrelates user activity with network events (correct answer)
  • Bserves as a controller within a controller-based network
  • Cintegrates with a RADIUS server to enforce Layer 2 device authentication rules
  • Dmakes forwarding decisions based on learned MAC addresses
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: correlates user activity with network events

200-301 Question 688

Single page →
Topic 1 · Question 688

Which IPsec transport mode encrypts the IP header and the payload?

  • Apipe
  • Btransport
  • Ccontrol
  • Dtunnel (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: tunnel This option keeps traffic private / properly secured as required.

200-301 Question 689

Single page →
Topic 1 · Question 689

What is the default port-security behavior on a trunk link?

  • AIt places the port in the err-disabled state if it learns more than one MAC address. (correct answer)
  • BIt causes a network loop when a violation occurs.
  • CIt disables the native VLAN configuration as soon as port security is enabled.
  • DIt places the port in the err-disabled state after 10 MAC addresses are statically configured.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: It places the port in the err-disabled state if it learns more than one MAC address.

Explanation

OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead. This option keeps traffic private / properly secured as required.

200-301 Question 690

Single page →
Topic 1 · Question 690

Which device separates networks by security domains?

  • Aintrusion protection system
  • Bfirewall (correct answer)
  • Cwireless controller
  • Daccess point
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: firewall This option keeps traffic private / properly secured as required.

200-301 Question 691

Single page →
Topic 1 · Question 691

How are VLAN hopping attacks mitigated?

  • Amanually implement trunk ports and disable DTP (correct answer)
  • Bconfigure extended VLANs
  • Cactivate all ports and place in the default VLAN
  • Denable dynamic ARP inspection
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: manually implement trunk ports and disable DTP

Explanation

A trunk carries traffic for multiple VLANs between network devices.

200-301 Question 692

Single page →
Topic 1 · Question 692

Which enhancements were implemented as part of WPA3?

  • AForward secrecy and SAE in personal mode for secure initial key exchange (correct answer)
  • B802.1x authentication and AES-128 encryption
  • CAES-64 in personal mode and AES-128 in enterprise mode
  • DTKIP encryption improving WEP and per-packet keying
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Forward secrecy and SAE in personal mode for secure initial key exchange

200-301 Question 693

Single page →
Topic 1 · Question 693

When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?

  • AIPsec transport mode with AH
  • BIPsec tunnel mode with AH
  • CIPsec transport mode with ESP
  • DIPsec tunnel mode with ESP (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: IPsec tunnel mode with ESP This option keeps traffic private / properly secured as required.

200-301 Question 694

Single page →
Topic 1 · Question 694

An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which configuration enables the traffic on the destination router?

  • Aline vty 0 15 access-class 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22 (correct answer)
  • Binterface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 10 in ! ip access-list standard 10 permit udp 10.139.58.0 0.0.0.7 host 10.122.49.1 eq 22
  • Cinterface FastEthernet0/0 ip address 10.122.49.1 255.255.255.252 ip access-group 110 in ! ip access-list standard 110 permit tcp 10.139.58.0 0.0.0.15 eq 22 host 10.122.49.1
  • Dline vty 0 15 access-group 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: line vty 0 15 access-class 120 in ! ip access-list extended 120 permit tcp 10.139.58.0 0.0.0.15 any eq 22

200-301 Question 695

Single page →
Topic 1 · Question 695

In an SDN architecture, which function of a network node is centralized on a controller?

  • ACreates the IP routing table
  • BDiscards a message due filtering
  • CMakes a routing decision (correct answer)
  • DProvides protocol access for remote access devices
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Makes a routing decision

200-301 Question 696

Single page →
Topic 1 · Question 696

Which management security process is invoked when a user logs in to a network device using their username and password?

  • Aauthentication (correct answer)
  • Bauditing
  • Caccounting
  • Dauthorization
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: authentication This option keeps traffic private / properly secured as required.

200-301 Question 697

Single page →
Topic 1 · Question 697 · Select all that apply

Refer to the exhibit. What are the two steps an engineer must take to provide the highest encryption and authentication using domain credentials from LDAP? (Choose two.)

Exhibit 1 for question 697
  • ASelect PSK under Authentication Key Management.
  • BSelect Static-WEP + 802.1X on Layer 2 Security.
  • CSelect WPA+WPA2 on Layer 2 Security. (correct answer)
  • DSelect 802.1X from under Authentication Key Management. (correct answer)
  • ESelect WPA Policy with TKIP Encryption.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Select WPA+WPA2 on Layer 2 Security. Option D: Select 802.1X from under Authentication Key Management.

Explanation

WPA2 uses AES-based CCMP to protect wireless traffic. This option keeps traffic private / properly secured as required.

200-301 Question 698

Single page →
Topic 1 · Question 698

Which enhancement is implemented in WPA3?

  • Aemploys PKI to identify access points
  • Bapplies 802.1x authentication
  • Cuses TKIP
  • Dprotects against brute force attacks (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: protects against brute force attacks

Showing questions 621–640 of 1182 · Page 32 of 60