Page 44 of 60 · 1182 total questions.
Which two features introduced in SNMPv2 provide the ability to retrieve large amounts of data in one request and acknowledge a trap using PDUs? (Choose two.)
The correct answer is D, E. Option D: GetBulk Option E: Inform
What is the purpose of configuring different levels of syslog for different devices on the network?
The correct answer is A. Option A: to set the severity of syslog messages from each device
Explanation
Syslog sends timestamped device events to local or remote logging destinations by severity.
Refer to the exhibit. The DHCP server is configured with a DHCP pool for each of the subnets represented. Which command must be configured on switch SW1 to allow DHCP clients on VLAN 10 to receive dynamic IP addresses from the DHCP server?
The correct answer is C. Option C: SW1(config-if)#ip helper-address 192.168.20.2
Explanation
OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.
Refer to the exhibit. Which minimum configuration items are needed to enable Secure Shell version 2 access to R15?
The correct answer is A. Option A: Router(config)#hostname R15 -R15(config)#ip domain-name cisco.comR15(config)#crypto key generate rsa general-keys modulus 1024R15(config)#ip ssh version 2 -R15(config-line)#line vty 0 15 -R15(config-line)# transport i...
Explanation
SSH provides encrypted remote CLI administration and should replace insecure Telnet. This option keeps traffic private / properly secured as required.
hostname CPE service password-encryption ip domain name ccna.cisco.com ip name-server 198.51.100.210 crypto key generate rsa modulus 1024 username admin privilege 15 secret s0m3s3cr3t line vty 0 4 transport input ssh login local Refer to the exhibit. An engineer executed the script and added commands that were not necessary for SSH and now must remove the commands. Which two commands must be executed to correct the configuration? (Choose two.)
The correct answer is A, C. Option A: no ip name-serveer 198.51.100.210 Option C: no service password-encryption This option keeps traffic private / properly secured as required.
Which two actions are taken as the result of traffic policing? (Choose two.)
The correct answer is B, C. Option B: dropping Option C: remarking
Explanation
OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead.
Which two server types support domain name to IP address resolution? (Choose two.)
The correct answer is A, D. Option A: authoritative Option D: resolver
What is a purpose of traffic shaping?
The correct answer is D. Option D: It limits bandwidth usage.
An engineering team asks an implementer to configure syslog for warning conditions and error conditions. Which command does the implementer configure to achieve the desired result?
The correct answer is D. Option D: logging trap 4
Which WLC management connection type is vulnerable to man-in-the-middle attacks?
The correct answer is B. Option B: Telnet
Refer to the exhibit. An engineer booted a new switch and applied this configuration via the console port. Which additional configuration must be applied to allow administrators to authenticate directly to global configuration mode via Telnet using a local username and password?
The correct answer is B. Option B: R1(config)#username admin privilege 15 secret p@ss1234R1(config-if)#line vty 0 4 -R1(config-line)#login local
Which type of encryption does WPA1 use for data protection?
The correct answer is B. Option B: TKIP This option keeps traffic private / properly secured as required.
Refer to the exhibit. A network administrator must permit traffic from the 10.10.0.0/24 subnet to the WAN on interface Serial0. What is the effect of the configuration as the administrator applies the command?
The correct answer is C. Option C: The router fails to apply the access list to the interface.
A network engineer must configure an access list on a new Cisco IOS router. The access list must deny HTTP traffic to network 10.125.128.32/27 from the 192.168.240.0/20 network, but it must allow the 192.168.240.0/20 network to reach the rest of the 10.0.0.0/8 network. Which configuration must the engineer apply?
The correct answer is B. Option B: ip access-list extended deny_outbound10 deny tcp 192.168.240.0 0.0.15.255 10.125.128.32 0.0.0.31 eq 8020 permit ip 192.168.240.0 0.0.15.255 10.0.0.0 0.255.255.25530 deny ip any any log
What is the definition of backdoor malware?
The correct answer is A. Option A: malicious code that is installed onto a computer to allow access by an unauthorized user
What does WPA3 provide in wireless networking?
The correct answer is B. Option B: safeguards against brute force attacks with SAE
Which global command encrypts all passwords in the running configuration?
The correct answer is A. Option A: service password-encryption This option keeps traffic private / properly secured as required.
Refer to the exhibit. A network administrator is configuring a router for user access via SSH. The service-password encryption command has been issued. The configuration must meet these requirements: • Create the username as CCUser. • Create the password as NA!2$cc. • Encrypt the user password. What must be configured to meet the requirements?
The correct answer is C. Option C: username CCUser secret NA!2Sce This option keeps traffic private / properly secured as required.
Refer to the exhibit. A network engineer started to configure port security on a new switch. These requirements must be met: • MAC addresses must be learned dynamically. • Log messages must be generated without disabling the interface when unwanted traffic is seen. Which two commands must be configured to complete this task? (Choose two.)
The correct answer is A, E. Option A: SW(config-if)#switchport port-security violation restrict Option E: SW(config-if)#switchport port-security mac-address sticky
Explanation
OSPF elects a designated router on multiaccess networks to reduce adjacency and LSA exchange overhead. REST APIs commonly manipulate resources over HTTP using methods such as GET, POST, PUT, PATCH, and DELETE. This option keeps traffic private / properly secured as required.
Which type of security program is violated when a group of employees enters a building using the ID badge of only one person?
The correct answer is C. Option C: physical access control This option keeps traffic private / properly secured as required.
Showing questions 861–880 of 1182 · Page 44 of 60