Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Enterprise Networking > Modules 3-5: Network Security > Flashcards

Modules 3-5: Network Security Flashcards

1
Q

The IT department is reporting that a company web server is receiving an abnormally high number of web page requests from different locations simultaneously. Which type of security attack is occurring?

adware
DDoS
phishing
social engineering
spyware
A

DDoS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What causes a buffer overflow?

launching a security countermeasure to mitigate a Trojan horse
downloading and installing too many software updates at one time
attempting to write more data to a memory location than that location can hold
sending too much information to two or more interfaces of the same device, thereby causing dropped packets
sending repeated connections such as Telnet to a particular device, thus denying other data sources

A

attempting to write more data to a memory location than that location can hold

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which objective of secure communications is achieved by encrypting data?

authentication
availability
confidentiality
integrity

A

confidentiality

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What type of malware has the primary objective of spreading across the network?

worm
virus
Trojan horse
botnet

A

worm

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What commonly motivates cybercriminals to attack networks as compared to hactivists or state-sponsored hackers?

financial gain
fame seeking
status among peers
political reasons

A

financial gain

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which type of hacker is motivated to protest against political and social issues?

hacktivist
cybercriminal
script kiddie
vulnerability broker

A

hacktivist

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is a ping sweep?

a query and response protocol that identifies information about a domain, including the addresses that are assigned to that domain.
a scanning technique that examines a range of TCP or UDP port numbers on a host to detect listening services.
a software application that enables the capture of all network packets that are sent across a LAN.
a network scanning technique that indicates the live hosts in a range of IP addresses.

A

a network scanning technique that indicates the live hosts in a range of IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

In what type of attack is a cybercriminal attempting to prevent legitimate users from accessing network services?

address spoofing
MITM
session hijacking
DoS

A

DoS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash generating algorithms?​

nonrepudiation
authentication
integrity
confidentiality

A

integrity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

If an asymmetric algorithm uses a public key to encrypt data, what is used to decrypt it?

a digital certificate
a different public key
a private key
DH

A

a private key

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Refer to the exhibit. Which two ACLs would permit only the two LAN networks attached to R1 to access the network that connects to R2 G0/1 interface? (Choose two.)

https://itexamanswers.net/wp-content/uploads/2019/12/i282152v1n2_282152.png

access-list 1 permit 192.168.10.0 0.0.0.127
access-list 2 permit host 192.168.10.9
access-list 2 permit host 192.168.10.69
access-list 5 permit 192.168.10.0 0.0.0.63
access-list 5 permit 192.168.10.64 0.0.0.63
access-list 3 permit 192.168.10.128 0.0.0.63
access-list 4 permit 192.168.10.0 0.0.0.255

A

access-list 1 permit 192.168.10.0 0.0.0.127

access-list 5 permit 192.168.10.0 0.0.0.63
access-list 5 permit 192.168.10.64 0.0.0.63

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which two packet filters could a network administrator use on an IPv4 extended ACL? (Choose two.)

destination UDP port number
computer type
destination MAC address
ICMP message type
source TCP hello address
A

destination UDP port number

ICMP message type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What type of ACL offers greater flexibility and control over network access?

numbered standard
named standard
extended
flexible

A

extended

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the quickest way to remove a single ACE from a named ACL?

Use the no keyword and the sequence number of the ACE to be removed.
Copy the ACL into a text editor, remove the ACE, then copy the ACL back into the router.
Create a new ACL with a different number and apply the new ACL to the router interface.
Use the no access-list command to remove the entire ACL, then recreate it without the ACE.

A

Use the no keyword and the sequence number of the ACE to be removed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Refer to the exhibit. A network administrator is configuring a standard IPv4 ACL. What is the effect after the command no access-list 10 is entered?

https://itexamanswers.net/wp-content/uploads/2019/12/i209863v1n1_209863.png

ACL 10 is removed from both the running configuration and the interface Fa0/1.
ACL 10 is removed from the running configuration.
ACL 10 is disabled on Fa0/1.
ACL 10 will be disabled and removed after R1 restarts.

A

ACL 10 is removed from the running configuration.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Refer to the exhibit. A network administrator has configured ACL 9 as shown. Users on the 172.31.1.0 /24 network cannot forward traffic through router CiscoVille. What is the most likely cause of the traffic failure?

https://itexamanswers.net/wp-content/uploads/2019/12/i215685v4n1_ACL-item.png

The established keyword is not specified.
The sequence of the ACEs is incorrect.
The port number for the traffic has not been identified with the eq keyword.
The permit statement specifies an incorrect wildcard mask.

A

The sequence of the ACEs is incorrect.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A network administrator needs to configure a standard ACL so that only the workstation of the administrator with the IP address 192.168.15.23 can access the virtual terminal of the main router. Which two configuration commands can achieve the task? (Choose two.)

Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0
Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.255
Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.255
Router1(config)# access-list 10 permit host 192.168.15.23
Router1(config)# access-list 10 permit 192.168.15.23 255.255.255.0

A

Router1(config)# access-list 10 permit 192.168.15.23 0.0.0.0

Router1(config)# access-list 10 permit host 192.168.15.23

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Refer to the exhibit. Which command would be used in a standard ACL to allow only devices on the network attached to R2 G0/0 interface to access the networks attached to R1?

https://itexamanswers.net/wp-content/uploads/2019/12/i282156v1n2_282156.png

access-list 1 permit 192.168.10.128 0.0.0.63
access-list 1 permit 192.168.10.0 0.0.0.255
access-list 1 permit 192.168.10.96 0.0.0.31
access-list 1 permit 192.168.10.0 0.0.0.63

A

access-list 1 permit 192.168.10.96 0.0.0.31

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A network administrator is writing a standard ACL that will deny any traffic from the 172.16.0.0/16 network, but permit all other traffic. Which two commands should be used? (Choose two.)

Router(config)# access-list 95 deny 172.16.0.0 255.255.0.0
Router(config)# access-list 95 permit any
Router(config)# access-list 95 host 172.16.0.0
Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255
Router(config)# access-list 95 172.16.0.0 255.255.255.255
Router(config)# access-list 95 deny any

A

Router(config)# access-list 95 permit any

Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Refer to the exhibit. An ACL was configured on R1 with the intention of denying traffic from subnet 172.16.4.0/24 into subnet 172.16.3.0/24. All other traffic into subnet 172.16.3.0/24 should be permitted. This standard ACL was then applied outbound on interface Fa0/0. Which conclusion can be drawn from this configuration?​

https://itexamanswers.net/wp-content/uploads/2019/12/i304992v1n1_304992.png

The ACL should be applied outbound on all interfaces of R1.
The ACL should be applied to the FastEthernet 0/0 interface of R1 inbound to accomplish the requirements.
All traffic will be blocked, not just traffic from the 172.16.4.0/24 subnet.
Only traffic from the 172.16.4.0/24 subnet is blocked, and all other traffic is allowed.​
An extended ACL must be used in this situation.

A

All traffic will be blocked, not just traffic from the 172.16.4.0/24 subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Refer to the exhibit. A network administrator needs to add an ACE to the TRAFFIC-CONTROL ACL that will deny IP traffic from the subnet 172.23.16.0/20. Which ACE will meet this requirement?

https://itexamanswers.net/wp-content/uploads/2019/12/i282896v1n2_282896.gif

30 deny 172.23.16.0 0.0.15.255
15 deny 172.23.16.0 0.0.15.255
5 deny 172.23.16.0 0.0.15.255
5 deny 172.23.16.0 0.0.255.255

A

5 deny 172.23.16.0 0.0.15.255

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Refer to the exhibit. A network administrator configures an ACL on the router. Which statement describes the result of the configuration?

https://itexamanswers.net/wp-content/uploads/2019/12/i209873v1n1_209873.png

An SSH connection is allowed from a workstation with IP 172.16.45.16 to a device with IP 192.168.25.18.
An SSH connection is allowed from a workstation with IP 192.168.25.18 to a device with IP 172.16.45.16.
A Telnet connection is allowed from a workstation with IP 192.168.25.18 to a device with IP 172.16.45.16.
A Telnet connection is allowed from a workstation with IP 172.16.45.16 to a device with IP 192.168.25.18.

A

An SSH connection is allowed from a workstation with IP 192.168.25.18 to a device with IP 172.16.45.16.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Refer to the exhibit. What can be determined from this output?

https://itexamanswers.net/wp-content/uploads/2019/12/i209869v1n1_209869.png

The ACL is missing the deny ip any any ACE.
The ACL is only monitoring traffic destined for 10.23.77.101 from three specific hosts.
Because there are no matches for line 10, the ACL is not working.
The router has not had any Telnet packets from 10.35.80.22 that are destined for 10.23.77.101.

A

The router has not had any Telnet packets from 10.35.80.22 that are destined for 10.23.77.101.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Refer to the exhibit. A network administrator wants to permit only host 192.168.1.1 /24 to be able to access the server 192.168.2.1 /24. Which three commands will achieve this using best ACL placement practices? (Choose three.)

https://itexamanswers.net/wp-content/uploads/2019/12/i217141v1n1_2.png

R2(config)# interface fastethernet 0/1
R2(config-if)# ip access-group 101 out
R2(config)# access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
R2(config-if)# ip access-group 101 in
R2(config)# access-list 101 permit ip any any
R2(config)# interface fastethernet 0/0
R2(config)# access-list 101 permit ip host 192.168.1.1 host 192.168.2.1

A

R2(config-if)# ip access-group 101 in

R2(config)# interface fastethernet 0/0

R2(config)# access-list 101 permit ip host 192.168.1.1 host 192.168.2.1

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Consider the following access list.

access-list 100 permit ip host 192.168.10.1 any
access-list 100 deny icmp 192.168.10.0 0.0.0.255 any echo
access-list 100 permit ip any any

Which two actions are taken if the access list is placed inbound on a router Gigabit Ethernet port that has the IP address 192.168.10.254 assigned? (Choose two.)

Only Layer 3 connections are allowed to be made from the router to any other network device.
Devices on the 192.168.10.0/24 network are not allowed to reply to any ping requests.
Devices on the 192.168.10.0/24 network can sucessfully ping devices on the 192.168.11.0 network.
A Telnet or SSH session is allowed from any device on the 192.168.10.0 into the router with this access list assigned.
Devices on the 192.168.10.0/24 network are allowed to reply to any ping requests.
Only the network device assigned the IP address 192.168.10.1 is allowed to access the router.

A

A Telnet or SSH session is allowed from any device on the 192.168.10.0 into the router with this access list assigned.
Devices on the 192.168.10.0/24 network are allowed to reply to any ping requests.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Refer to the exhibit. The named ACL “Managers” already exists on the router. What will happen when the network administrator issues the commands that are shown in the exhibit?

https://itexamanswers.net/wp-content/uploads/2019/12/i148460n1v1.jpg

The commands are added at the end of the existing Managers ACL.
The commands overwrite the existing Managers ACL.
The commands are added at the beginning of the existing Managers ACL.
The network administrator receives an error that states that the ACL already exists.

A

The commands are added at the end of the existing Managers ACL.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

In which TCP attack is the cybercriminal attempting to overwhelm a target host with half-open TCP connections?

port scan attack
SYN flood attack
session hijacking attack
reset attack

A

SYN flood attack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which protocol is attacked when a cybercriminal provides an invalid gateway in order to create a man-in-the-middle attack?

DHCP
DNS
ICMP
HTTP or HTTPS

A

DHCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Refer to the exhibit. An administrator has configured a standard ACL on R1 and applied it to interface serial 0/0/0 in the outbound direction. What happens to traffic leaving interface serial 0/0/0 that does not match the configured ACL statements?

https://itexamanswers.net/wp-content/uploads/2019/12/i233528v1n1_233527.png

The traffic is dropped.
The source IP address is checked and, if a match is not found, traffic is routed out interface serial 0/0/1.
The resulting action is determined by the destination IP address.
The resulting action is determined by the destination IP address and port number.

A

The traffic is dropped.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Refer to the exhibit. The Gigabit interfaces on both routers have been configured with subinterface numbers that match the VLAN numbers connected to them. PCs on VLAN 10 should be able to print to the P1 printer on VLAN 12. PCs on VLAN 20 should print to the printers on VLAN 22. What interface and in what direction should you place a standard ACL that allows printing to P1 from data VLAN 10, but stops the PCs on VLAN 20 from using the P1 printer? (Choose two.)

https://itexamanswers.net/wp-content/uploads/2019/12/i215806v1n2_215806.png

inbound
R2 S0/0/1
R1 Gi0/1.12
outbound
R1 S0/0/0
R2 Gi0/1.20
A

R1 Gi0/1.12

outbound

31
Q

Which statement describes a characteristic of standard IPv4 ACLs?

They are configured in the interface configuration mode.
They can be configured to filter traffic based on both source IP addresses and source ports.
They can be created with a number but not with a name.
They filter traffic based on source IP addresses only.

A

They filter traffic based on source IP addresses only.

32
Q

What is considered a best practice when configuring ACLs on vty lines?

Place identical restrictions on all vty lines.
Remove the vty password since the ACL restricts access to trusted users.
Apply the ip access-group command inbound.
Use only extended access lists.

A

Place identical restrictions on all vty lines.

33
Q

https://itexamanswers.net/wp-content/uploads/2019/12/i241882v4n1_241882.png

Refer to the exhibit. An administrator first configured an extended ACL as shown by the output of the show access-lists command. The administrator then edited this access-list by issuing the commands below.

Router(config)# ip access-list extended 101
Router(config-ext-nacl)# no 20
Router(config-ext-nacl)# 5 permit tcp any any eq 22
Router(config-ext-nacl)# 20 deny udp any any

Which two conclusions can be drawn from this new configuration?​ (Choose two.)

TFTP packets will be permitted.​
Ping packets will be permitted.
Telnet packets will be permitted.
SSH packets will be permitted.
All TCP and UDP packets will be denied.​
A

SSH packets will be permitted.

Ping packets will be permitted.

34
Q

Which set of access control entries would allow all users on the 192.168.10.0/24 network to access a web server that is located at 172.17.80.1, but would not allow them to use Telnet?

access-list 103 deny tcp host 192.168.10.0 any eq 23
access-list 103 permit tcp host 192.168.10.1 eq 80
access-list 103 permit tcp 192.168.10.0 0.0.0.255 any eq 80
access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23
access-list 103 permit 192.168.10.0 0.0.0.255 host 172.17.80.1
access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq telnet​​
access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80
access-list 103 deny tcp ​192.168.10.0 0.0.0.255 any eq 23

A

access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80
access-list 103 deny tcp ​192.168.10.0 0.0.0.255 any eq 23

35
Q

What is the term used to describe a mechanism that takes advantage of a vulnerability?

mitigation
exploit
vulnerability
threat

A

exploit

36
Q

Refer to the exhibit. The network administrator has an IP address of 192.168.11.10 and needs access to manage R1. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i350680v1n1_C3M4-Diagram.jpg

extended ACL outbound on R2 WAN interface towards the internet
standard ACL inbound on R1 vty lines
extended ACLs inbound on R1 G0/0 and G0/1
extended ACL outbound on R2 S0/0/1

A

standard ACL inbound on R1 vty lines

37
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the any configuration option or command?

to add a text entry for documentation purposes
to generate and send an informational message whenever the ACE is matched
to identify any IP address
to identify one specific IP address

A

to identify any IP address

38
Q

Which statement accurately characterizes the evolution of threats to network security?

Internet architects planned for network security from the beginning.
Early Internet users often engaged in activities that would harm other users.
Internal threats can cause even greater damage than external threats.
Threats have become less sophisticated while the technical knowledge needed by an attacker has grown.

A

Internal threats can cause even greater damage than external threats.

39
Q

A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent?

spam
social engineering
DDoS
anonymous keylogging

A

social engineering

40
Q

In what way are zombies used in security attacks?

They target specific individuals to gain corporate or personal information.
They probe a group of machines for open ports to learn which services are running.
They are maliciously formed code segments used to replace legitimate applications.
They are infected machines that carry out a DDoS attack.

A

They are infected machines that carry out a DDoS attack.

41
Q

Which attack involves threat actors positioning themselves between a source and destination with the intent of transparently monitoring, capturing, and controlling the communication?

man-in-the-middle attack
SYN flood attack
DoS attack
ICMP attack

A

man-in-the-middle attack

42
Q

Which two keywords can be used in an access control list to replace a wildcard mask or address and wildcard mask pair? (Choose two.)

host
most
gt
some
any
all
A

host

any

43
Q

Which statement describes a difference between the operation of inbound and outbound ACLs?

Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.
In contrast to outbound ALCs, inbound ACLs can be used to filter packets with multiple criteria.
On a network interface, more than one inbound ACL can be configured but only one outbound ACL can be configured.
Inbound ACLs can be used in both routers and switches but outbound ACLs can be used only on routers.

A

Inbound ACLs are processed before the packets are routed while outbound ACLs are processed after the routing is completed.

44
Q

What effect would the Router1(config-ext-nacl)# permit tcp 172.16.4.0 0.0.0.255 any eq www command have when implemented inbound on the f0/0 interface?

All TCP traffic is permitted, and all other traffic is denied.
Traffic originating from 172.16.4.0/24 is permitted to all TCP port 80 destinations.
All traffic from 172.16.4.0/24 is permitted anywhere on any port.
The command is rejected by the router because it is incomplete.

A

Traffic originating from 172.16.4.0/24 is permitted to all TCP port 80 destinations.

45
Q

Which ACE will permit a packet that originates from any network and is destined for a web server at 192.168.1.1?

access-list 101 permit tcp any host 192.168.1.1 eq 80
access-list 101 permit tcp host 192.168.1.1 eq 80 any
access-list 101 permit tcp host 192.168.1.1 any eq 80
access-list 101 permit tcp any eq 80 host 192.168.1.1

A

access-list 101 permit tcp any host 192.168.1.1 eq 80

46
Q

Refer to the exhibit. A new network policy requires an ACL denying FTP and Telnet access to a Corp file server from all interns. The address of the file server is 172.16.1.15 and all interns are assigned addresses in the 172.18.200.0/24 network. After implementing the ACL, no one in the Corp network can access any of the servers. What is the problem?

https://itexamanswers.net/wp-content/uploads/2019/12/i254796v1n1_254796-1.jpg

Inbound ACLs must be routed before they are processed.
The ACL is implicitly denying access to all the servers.
Named ACLs require the use of port numbers.
The ACL is applied to the interface using the wrong direction.

A

The ACL is implicitly denying access to all the servers.

47
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the access-class 20 in configuration option or command?

to secure administrative access to the router
to remove an ACL from an interface
to remove a configured ACL
to apply a standard ACL to an interface

A

to secure administrative access to the router

48
Q

What is the term used to describe the same pre-shared key or secret key, known by both the sender and receiver to encrypt and decrypt data?

symmetric encryption algorithm
data integrity
exploit
risk

A

symmetric encryption algorithm

49
Q

Refer to the exhibit. Internet privileges for an employee have been revoked because of abuse but the employee still needs access to company resources. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i350685v1n1_C3M4-Diagram.jpg

standard ACL inbound on R2 WAN interface connecting to the internet
standard ACL outbound on R2 WAN interface towards the internet
standard ACL inbound on R1 G0/0
standard ACL outbound on R1 G0/0

A

standard ACL outbound on R2 WAN interface towards the internet

50
Q

Refer to the exhibit. The student on the H1 computer continues to launch an extended ping with expanded packets at the student on the H2 computer. The school network administrator wants to stop this behavior, but still allow both students access to web-based computer assignments. What would be the best plan for the network administrator?

https://itexamanswers.net/wp-content/uploads/2019/12/i215813v1n1_215813.png

Apply an inbound standard ACL on R1 Gi0/0.
Apply an inbound extended ACL on R2 Gi0/1.
Apply an outbound extended ACL on R1 S0/0/1.
Apply an inbound extended ACL on R1 Gi0/0.
Apply an outbound standard ACL on R2 S0/0/1.

A

Apply an inbound extended ACL on R1 Gi0/0.

51
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the ‘ip access-group 101 in’ configuration option or command?

to apply an extended ACL to an interface
to secure management traffic into the router
to secure administrative access to the router
to display all restricted traffic

A

to apply an extended ACL to an interface

52
Q

In which type of attack is falsified information used to redirect users to malicious Internet sites?

DNS amplification and reflection
ARP cache poisoning
DNS cache poisoning
domain generation

A

DNS cache poisoning

53
Q

What is a feature of an IPS?

It can stop malicious packets.
It is deployed in offline mode.
It has no impact on latency.
It is primarily focused on identifying possible incidents.

A

It can stop malicious packets.

54
Q

What is the term used to describe a potential danger to a company’s assets, data, or network functionality?

vulnerability
threat
asset
exploit

A

threat

55
Q

Refer to the exhibit. Network 192.168.30.0/24 contains all of the company servers. Policy dictates that traffic from the servers to both networks 192.168.10.0 and 192.168.11.0 be limited to replies for original requests. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i350676v1n1_C3M4-Diagram.jpg

standard ACL inbound on R1 vty lines
extended ACLs inbound on R1 G0/0 and G0/1
extended ACL inbound on R3 G0/0
extended ACL inbound on R3 S0/0/1

A

extended ACL inbound on R3 G0/0

56
Q

What does the CLI prompt change to after entering the command ip access-list standard aaa from global configuration mode?

Router(config-line)#
Router(config-std-nacl)#
Router(config)#
Router(config-router)#
Router(config-if)#
A

Router(config-std-nacl)#

57
Q

Refer to the exhibit. Many employees are wasting company time accessing social media on their work computers. The company wants to stop this access. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i389082v1n1_C3M4_Diagram.png

extended ACL outbound on R2 WAN interface towards the internet
standard ACL outbound on R2 WAN interface towards the internet
standard ACL outbound on R2 S0/0/0
extended ACLs inbound on R1 G0/0 and G0/1

A

extended ACLs inbound on R1 G0/0 and G0/1

58
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the 40 deny host 192.168.23.8 configuration option or command?

to remove all ACLs from the router
to create an entry in a numbered ACL
to apply an ACL to all router interfaces
to secure administrative access to the router

A

to create an entry in a numbered ACL

59
Q

What is the best description of Trojan horse malware?

It is malware that can only be distributed over the Internet.
It appears as useful software but hides malicious code.
It is software that causes annoying but not fatal computer problems.
It is the most easily detected form of malware.

A

It appears as useful software but hides malicious code.

60
Q

What wild card mask will match networks 172.16.0.0 through 172.19.0.0?

  1. 0.3.255
  2. 252.255.255
  3. 3.255.255
  4. 0.255.255
A

0.3.255.255

61
Q

What is the term used to describe gray hat hackers who publicly protest organizations or governments by posting articles, videos, leaking sensitive information, and performing network attacks?

white hat hackers
grey hat hackers
hacktivists
state-sponsored hacker

A

hacktivists

62
Q

Refer to the exhibit. The company has provided IP phones to employees on the 192.168.10.0/24 network and the voice traffic will need priority over data traffic. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i350679v1n1_C3M4-Diagram.jpg

extended ACL inbound on R1 G0/0
extended ACL outbound on R2 WAN interface towards the internet
extended ACL outbound on R2 S0/0/1
extended ACLs inbound on R1 G0/0 and G0/1

A

extended ACL inbound on R1 G0/0

63
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the no ip access-list 101 configuration option or command?

to apply an ACL to all router interfaces
to secure administrative access to the router
to remove all ACLs from the router
to remove a configured ACL

A

to remove a configured ACL

64
Q

What is the term used to describe unethical criminals who compromise computer and network security for personal gain, or for malicious reasons?

hacktivists
vulnerability broker
black hat hackers
script kiddies

A

black hat hackers

65
Q

What is the term used to describe a guarantee that the message is not a forgery and does actually come from whom it states?

origin authentication
mitigation
exploit
data non-repudiation

A

origin authentication

66
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the ip access-group 101 in configuration option or command?

to secure administrative access to the router
to apply an extended ACL to an interface
to display all restricted traffic
to secure management traffic into the router

A

to apply an extended ACL to an interface

67
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the remark configuration option or command?

to generate and send an informational message whenever the ACE is matched
to add a text entry for documentation purposes
to identify one specific IP address
to restrict specific traffic access through an interface

A

to add a text entry for documentation purposes

68
Q

Refer to the exhibit. The company CEO demands that one ACL be created to permit email traffic to the internet and deny FTP access. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2020/07/What-is-the-best-ACL-type-and-placement-to-use-in-this-situation.jpg

extended ACL outbound on R2 WAN interface towards the internet
standard ACL outbound on R2 S0/0/0
extended ACL inbound on R2 S0/0/0
standard ACL inbound on R2 WAN interface connecting to the internet

A

extended ACL outbound on R2 WAN interface towards the internet

69
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the established configuration option or command?

to add a text entry for documentation purposes
to display all restricted traffic
to allow specified traffic through an interface
to allow returning reply traffic to enter the internal network

A

to allow returning reply traffic to enter the internal network

70
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the deny configuration option or command?

to identify one specific IP address
to display all restricted traffic
to restrict specific traffic access through an interface
to generate and send an informational message whenever the ACE is matched

A

to restrict specific traffic access through an interface

71
Q

Refer to the exhibit. Only authorized remote users are allowed remote access to the company server 192.168.30.10. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2019/12/i350676v1n1_C3M4-Diagram.jpg

extended ACLs inbound on R1 G0/0 and G0/1
extended ACL outbound on R2 WAN interface towards the internet
extended ACL inbound on R2 S0/0/0
extended ACL inbound on R2 WAN interface connected to the internet

A

extended ACL inbound on R2 WAN interface connected to the internet

72
Q

Refer to the exhibit. Employees on 192.168.11.0/24 work on critically sensitive information and are not allowed access off their network. What is the best ACL type and placement to use in this situation?

https://itexamanswers.net/wp-content/uploads/2020/01/i350782v1n1_C3M4-Diagram-1.jpg

standard ACL inbound on R1 vty lines
extended ACL inbound on R1 G0/0
standard ACL inbound on R1 G0/1
extended ACL inbound on R3 S0/0/1

A

standard ACL inbound on R1 G0/1

73
Q

A technician is tasked with using ACLs to secure a router. When would the technician use the host configuration option or command?

to add a text entry for documentation purposes
to generate and send an informational message whenever the ACE is matched
to identify any IP address
to identify one specific IP address

A

to identify one specific IP address

Enterprise Networking (6 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions