Final Exam Enterprise Networking, Security, and Automation Part 5

147. Which type of VPN is the preferred choice for support and ease of deployment for remote access?  SSL VPN  GRE over IPsec  dynamic multipoint VPN  IPsec virtual tunnel interface 148. What type of trafÏc is described as predictable and smooth?  video  data  voice 149. Which queuing mechanism has no provision for prioritizing or buffering but simply forwards packets in the order they arrive?  FIFO  LLQ  CBWFQ  WFQ 150. Refer to the exhibit. A network administrator has configured OSPFv2 on the two Cisco routers. The routers are unable to form a neighbor adjacency. What should be done to fix the problem on router R2?  Implement the command no passive-interface Serial0/1.  Implement the command network 192.168.2.6 0.0.0.0 area 0 on router R2.  Change the router-id of router R2 to 2.2.2.2.  Implement the command network 192.168.3.1 0.0.0.0 area 0 on router R2. 151. A network administrator is troubleshooting an OSPF problem that involves neighbor adjacency. What should the administrator do?  Make sure that the router priority is unique on each router.  Make sure that the DR/BDR election is complete.  Make sure that the router ID is included in the hello packet.  Make sure that the hello and dead interval timers are the same on all routers. 152. Refer to the exhibit. Internet privileges for an employee have been revoked because of abuse but the employee still needs access to company resources. What is the best ACL type and placement to use in this situation? CCNA 3 v7 Modules 3 – 5: Network Security Exam Answers 49  standard ACL inbound on R2 WAN interface connecting to the internet  standard ACL outbound on R2 WAN interface towards the internet  standard ACL inbound on R1 G0/0  standard ACL outbound on R1 G0/0 Explanation:;– Standard ACLs permit or deny packets based only on the source IPv4 address. Because all traffic types are permitted or denied, standard ACLs should be located as close to the destination as possible. – Extended ACLs permit or deny packets based on the source IPv4 address and destination IPv4 address, protocol type, source and destination TCP or UDP ports and more. Because the filtering of extended ACLs is so specific, extended ACLs should be located as close as possible to the source of the traffic to be filtered. Undesirable traffic is denied close to the source network without crossing the network infrastructure. 153. An ACL is applied inbound on a router interface. The ACL consists of a single entry: access-list 100 permit tcp 192.168.10.0 0.0.0.255 172.17.200.0 0.0.0.255 eq www . If a packet with a source address of 192.168.10.244, a destination address of 172.17.200.56, and a protocol of 80 is received on the interface, is the packet permitted or denied?  denied  permitted 154. A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use applications such as Nmap, SuperScan, and Angry IP Scanner?  to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network  to detect any evidence of a hack or malware in a computer or network  to reverse engineer binary files when writing exploits and when analyzing malware  to probe network devices, servers, and hosts for open TCP or UDP ports 155. What command would be used as part of configuring NAT or PAT to display any dynamic PAT translations that have been created by trafÏc?  show ip pat translations  show ip cache  show running-config  show ip nat translations 156. An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 172.16.91.0 255.255.255.192. What wildcard mask would the administrator use in the OSPF network statement?  0.0.31.255  0.0.0.63  0.0.15.255  0.0.7.255 157. What type of trafÏc is described as requiring latency to be no more than 400 milliseconds (ms)?  video  data  voice 158. Refer to the exhibit. Which two configurations would be used to create and apply a standard access list on R1, so that only the 10.0.70.0/25 network devices are allowed to access the internal database server? (Choose two.)  A. R1(config)# interface GigabitEthernet0/0 R1(config-if)# ip access-group 5 out  B. R1(config)# access-list 5 permit 10.0.54.0 0.0.1.255  C. R1(config)# interface Serial0/0/0 R1(config-if)# ip access-group 5 in  D. R1(config)# access-list 5 permit 10.0.70.0 0.0.0.127  E. R1(config)# access-list 5 permit any 159. A network administrator is writing a standard ACL that will deny any trafÏc from the 172.16.0.0/16 network, but permit all other trafÏc. Which two commands should be used? (Choose two.)  Router(config)# access-list 95 deny 172.16.0.0 255.255.0.0  Router(config)# access-list 95 permit any  Router(config)# access-list 95 host 172.16.0.0  Router(config)# access-list 95 deny 172.16.0.0 0.0.255.255  Router(config)# access-list 95 172.16.0.0 255.255.255.255  Router(config)# access-list 95 deny any Explanation: To deny traffic from the 172.16.0.0/16 network, the access-list 95 deny 172.16.0.0 0.0.255.255 command is used. To permit all other traffic, the access-list 95 permit any statement is added. 160. Refer to the exhibit. The company has decided that no trafÏc initiating from any other existing or future network can be transmitted to the Research and Development network. Furthermore, no trafÏc that originates from the Research and Development network can be transmitted to any other existing or future networks in the company. The network administrator has decided that extended ACLs are better suited for these requirements. Based on the information given, what will the network administrator do?  One ACL will be placed on the R1 Gi0/0 interface and one ACL will be placed on the R2 Gi0/0 interface.  Only a numbered ACL will work for this situation.  One ACL will be placed on the R2 Gi0/0 interface and one ACL will be placed on the R2 S0/0/0 interface.  Two ACLs (one in each direction) will be placed on the R2 Gi0/0 interface. 161. What protocol uses smaller stratum numbers to indicate that the server is closer to the authorized time source than larger stratum numbers?  TFTP  SYSLOG  NTP  MPLS 162. Refer to the exhibit. If no router ID was manually configured, what would router Branch1 use as its OSPF router ID?  10.0.0.1  10.1.0.1  192.168.1.100  209.165.201.1 Explanation: In OSPFv2, a Cisco router uses a three-tier method to derive its router ID. The first choice is the manually configured router ID with the router-id command. If the router ID is not manually configured, the router will choose the highest IPv4 address of the configured loopback interfaces. Finally if no loopback interfaces are configured, the router chooses the highest active IPv4 address of its physical interfaces. 163. Match the HTTP method with the RESTful operation. 164. Refer to the exhibit. A web designer calls to report that the web server webs1.cisco.com is not reachable through a web browser. The technician uses command line utilities to verify the problem and to begin the troubleshooting process. Which two things can be determined about the problem? (Choose two.)  The web server at 192.168.0.10 is reachable from the source host.  The default gateway between the source host and the server at 192.168.0.10 is down.  There is a problem with the web server software on web-s1.cisco.com.  A router is down between the source host and the server web-s1.cisco.com.  DNS cannot resolve the IP address for the server web-s1.cisco.com. 165. What type of trafÏc is described as tending to be unpredictable, inconsistent, and bursty?  video  voice  data 166. Match the functions to the corresponding layers. (Not all options are used.) 167. What type of trafÏc is described as consisting of trafÏc that requires a higher priority if interactive?  voice  data  video 168. Which type of VPN provides a flexible option to connect a central site with branch sites?  IPsec VPN  client-based IPsec VPN  Layer 3 MPLS VPN  clientless SSL VPN  Cisco Dynamic Multipoint VPN  GRE over IPsec VPN 169. A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use fuzzers?  to discover security vulnerabilities of a computer  to detect any evidence of a hack or malware in a computer or network  to reverse engineer binary files when writing exploits and when analyzing malware  to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network 170. Refer to the exhibit. A network administrator has configured a standard ACL to permit only the two LAN networks attached to R1 to access the network that connects to R2 G0/1 interface, but not the G0/0 interface. When following the best practices, in what location should the standard ACL be applied?  R1 S0/0/0 outbound  R2 G0/0 outbound  R2 S0/0/1 outbound  R1 S0/0/0 inbound  R2 G0/1 inbound 171. Two OSPF-enabled routers are connected over a point-to-point link. During the ExStart state, which router will be chosen as the first one to send DBD packets?  the router with the highest router ID  the router with the lowest IP address on the connecting interface  the router with the highest IP address on the connecting interface  the router with the lowest router ID Explain:In the ExStart state, the two routers decide which router will send the DBD packets first. The router with the higher router ID will be the first router to send DBD packets during the Exchange state 172. Which step in the link-state routing process is described by a router sending Hello packets out all of the OSPF-enabled interfaces?  exchanging link-state advertisements  electing the designated router  injecting the default route  establishing neighbor adjacencies 173. A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use forensic tools?  to obtain specially designed operating systems preloaded with tools optimized for hacking  to detect any evidence of a hack or malware in a computer or network  to detect installed tools within files and directories that provide threat actors remote access and control over a computer or network  to reverse engineer binary files when writing exploits and when analyzing malware 174. Refer to the exhibit. A network administrator has configured OSPFv2 on the two Cisco routers but PC1 is unable to connect to PC2. What is the most likely problem?  Interface Fa0/0 has not been activated for OSPFv2 on router R2.  Interface Fa0/0 is configured as a passive-interface on router R2.  Interface S0/0 is configured as a passive-interface on router R2.  Interface s0/0 has not been activated for OSPFv2 on router R2. Explanation: If a LAN network is not advertised using OSPFv2, a remote network will not be reachable. The output displays a successful neighbor adjacency between router R1 and R2 on the interface S0/0 of both routers. 175. ABCTech is investigating the use of automation for some of its products. In order to control and test these products, the programmers require Windows, Linux, and MAC OS on their computers. What service or technology would support this requirement?  dedicated servers  software defined networking  virtualization  Cisco ACI 176. A network engineer has noted that some expected network route entries are not displayed in the routing table. Which two commands will provide additional information about the state of router adjacencies, timer intervals, and the area ID? (Choose two.)  show ip protocols  show ip ospf neighbor  show running-configuration  show ip ospf interface  show ip route ospf 177. Which type of VPN involves the forwarding of trafÏc over the backbone through the use of labels distributed among core routers?  MPLS VPN  GRE over IPsec  IPsec virtual tunnel interface  dynamic multipoint VPN 178. Which type of VPN involves a nonsecure tunneling protocol being encapsulated by IPsec?  SSL VPN  dynamic multipoint VPN  GRE over IPsec  IPsec virtual tunnel interface 179. A company has contracted with a network security firm to help identify the vulnerabilities of the corporate network. The firm sends a team to perform penetration tests to the company network. Why would the team use hacking operation systems?  to detect any evidence of a hack or malware in a computer or network  to obtain specially designed operating systems preloaded with tools optimized for hacking  to encode data, using algorithm schemes, to prevent unauthorized access to the encrypted data  to reverse engineer binary files when writing exploits and when analyzing malware 180. What command would be used as part of configuring NAT or PAT to identify an interface as part of the external global network?  ip pat inside  access-list 10 permit 172.19.89.0 0.0.0.255  ip nat inside  ip nat outside 181. To avoid purchasing new hardware, a company wants to take advantage of idle system resources and consolidate the number of servers while allowing for multiple operating systems on a single hardware platform. What service or technology would support this requirement?  data center  cloud services  virtualization  dedicated servers Explain: Server virtualization takes advantage of idle resources and consolidates the number of required servers. This also allows for multiple operating systems to exist on a single hardware platform. 182. Which type of VPN routes packets through virtual tunnel interfaces for encryption and forwarding?  MPLS VPN  IPsec virtual tunnel interface  dynamic multipoint VPN  GRE over IPsec 183. Which step in the link-state routing process is described by a router flooding linkstate and cost information about each directly connected link?  building the topology table  selecting the router ID  exchanging link-state advertisements  injecting the default route 184. What type of trafÏc is described as using either TCP or UDP depending on the need for error recovery?  video  voice  data 185. Refer to the exhibit. The company CEO demands that one ACL be created to permit email trafÏc to the internet and deny FTP access. What is the best ACL type and placement to use in this situation?  extended ACL outbound on R2 WAN interface towards the internet  standard ACL outbound on R2 S0/0/0  extended ACL inbound on R2 S0/0/0  standard ACL inbound on R2 WAN interface connecting to the internet 186. What command would be used as part of configuring NAT or PAT to define a pool of addresses for translation?  ip nat inside source static 172.19.89.13 198.133.219.65  ip nat inside source list 24 interface serial 0/1/0 overload  ip nat pool POOL-STAT 64.100.14.17 64.100.14.30 netmask 255.255.255.240  ip nat outside 187. What is the name of the layer in the Cisco borderless switched network design that is considered to be the backbone used for high-speed connectivity and fault isolation?  data link  access  core  network  network access 188. An ACL is applied inbound on router interface. The ACL consists of a single entry: access-list 210 permit tcp 172.18.20.0 0.0.0.47 any eq ftp If a packet with a source address of 172.18.20.40, a destination address of 10.33.19.2, and a protocol of 21 is received on the interface, is the packet permitted or denied?  permitted  denied 189. What type of trafÏc is described as consisting of trafÏc that gets a lower priority if it is not mission-critical?  video  data  voice 190. Which OSPF table is identical on all converged routers within the same OSPF area?  routing  neighbor  adjacency  topology 191. An ACL is applied inbound on a router interface. The ACL consists of a single entry: access-list 100 permit tcp 192.168.10.0 0.0.0.255 any eq www . If a packet with a source address of 192.168.10.45, a destination address of 10.10.3.27, and a protocol of 80 is received on the interface, is the packet permitted or denied?  permitted  denied 192. What protocol allows the manager to poll agents to access information from the agent MIB?  CBWFQ  SYSLOG  TFTP  SNMP