Wrong answers

Question 1

Which security feature or device would more likely be used within a CAN than a SOHO or data center?

Answer 1

ESA/WSA

Question 2

A company has several sales offices distributed within a city. Each sales office has a SOHO network. What are two security features that are commonly found in such a network configuration?

Answer 2

WPA2 and port security on user facing ports because WPA2 is commonly used for wireless encryption and port security is used to ensure non-company devices are not plugged into the wired network

Question 3

What is the purpose of a reconnaissance attack on a computer?

Answer 3

To gather information about the target network system

Question 4

Which security measure is best used to limit the success of a reconnaissance attack from within a campus area network?

Answer 4

Implement encryption for sensitive traffic so data cannot be read

Question 5

What functional area of the Cisco Network Foundation Protection framework is responsible for device-generated packets required for network operation, such as ARP message exchanges and routing advertisements

Answer 5

Data plane

Question 6

Which security implementation will provide Management plane protection for a network device?

Answer 6

Role-based access control

Question 7

Which two practices are associated with securing the features and performance of router operating systems?

Answer 7

Keep a secure copy of router operating system images and configure router with the maximum amount of memory possible

Question 8

What does keeping a secure copy of router operating system images and configuring a router with the maximum amount of memory possible do?

Answer 8

-Provides backups needed for device recovery
-Allows support for the widest range of security services AND can help protect against certain DoS attacks

Question 9

What IOS privilege levels are available to assign for custom user-level privileges?

Answer 9

Levels 2 through 14 because levels 0, 1, and 15 have predefined settings

Question 10

An administrator needs to create a user account with custom access to most privileged EXEC commands. Which privilege command is used to create this custom account?

Answer 10

Privilege exec level 2

Question 11

A student is learning role-based CLI access and CLI view configurations. The student opens Packet Tracer and adds a router. Which command should be used first for creating a CLI view named TECH-View?

Answer 11

Router(config)# aaa new-model

Question 12

A student is learning about role-based views and role-based view configurations. The student enters the Router(config)# parser view TECH-view command. What is the purpose of this command?

Answer 12

To create a CLI view named TECH-View

Question 13

What are two characteristics of the Cisco IOS Resilient Configuration feature?

Answer 13

It saves a secure copy of the primary image and device configuration that cannot be removed by a user and it minimizes the downtime of a device that has had the image and configuration deleted

Question 14

A network engineer is implementing security on all company routers. Which two commands must be issued to force authentication via the password 1A2b3C for all OSPF-enabled interfaces in the backbone area of the company network?

Answer 14

Area 0 authentication message-digest and area 1 authentication message-digest

Question 15

What information in the syslog message identifies the facility? |*Mar 1 00:02:59.451: %OSPF-5-ADJCHG: Process 99, Nbr 172.16.10.5 on Serial0/0 from LOADING to FULL, Loading Done|

Answer 15

OSPF