review

Question 1

What happens when the max number of allowed MAC addresses is reached?

Answer 1

The port is shut down

Question 2

Role Based CLI

Answer 2

define views to different set of exec commands. These views restrict CLI access

Question 3

Access Lists mask type?

Answer 3

wildcard /30 = 0.0.0.3

Question 4

IPv6 ACLs : What type?

Answer 4

Extended only

Question 5

Warning Syslog?

Answer 5

4 - Warn

Question 6

Emergencies Syslog

Answer 6

0

Question 7

Alert Syslog

Answer 7

1 l for alert

Question 8

error Syslog

Answer 8

3 for 3 rrrs

Question 9

notification syslog

Answer 9

5 for no ti fi ca tion

Question 10

informational syslog

Answer 10

6 for in for ma tio nal

Question 11

debugging syslog

Answer 11

7 bugs

Question 12

What is ISE?

Answer 12

Integrated Service Engine

-part of the BYOD solution. Identity and Access control policy - checks computer before getting on the network

Question 13

What is ACS?

Answer 13

Access control Server - used for authenticating and store users and passwords.
Used with TACACS+ and RADIUS

Question 14

What does the “aaa new-model” command do?

Answer 14

Enables the configuration of the rest of the AAA

Question 15

How to connect to a ACS Server?

Answer 15

tacacs-server host #.#.#.# mypassword

Question 16

image resilience feature?

Answer 16

ios image file invisible from show flash command

Question 17

Retire/Unretire

Answer 17

unretire = compile/use signature / retire = do not use/compile

Question 18

secure boot-config

Answer 18

takes a snapshot of running config and securely archives it

Question 19

public keys on routers

Answer 19

verifies digital signature of IPS signature file

Question 20

zone pairs

Answer 20

aaaa

Question 21

show crypto session

Answer 21

shows phase 1 & phase 2 sessions of IPSec

Question 22

features of TACACS+

Answer 22

separates AAA / encrypts body of every packet

Question 23

What can attack CDP?

Answer 23

DoS

Question 24

ACL position

Answer 24

as close to the source traffic

Question 25

IP source guard?

Answer 25

prevents IP/MAC spoofing

Question 26

ASA - webdeploy AnyConnect client

Answer 26

anyconnect enable

Question 27

ESP port#

Answer 27

50

Question 28

out-of-band

Answer 28

hosts management servers, tools, servers, services. it separates from other traffic

Question 29

watches connection requests and protects from DDOS

Answer 29

ip tcp intercept mode intercept

Question 30

Ah port#

Answer 30

51