CCNA Security V2 Final Exam (Part 4)
What are three components of a technical security policy? (Choose three.) - human resource policy - acceptable use policy - remote access policy - identity policy - network access policy - end user policy
- acceptable use policy - remote access policy - network access policy
Which two types of hackers are typically classified as grey hat hackers? (Choose two.) - script kiddies - vulnerability brokers - cyber criminals - state-sponsored hackers - hacktivists
- vulnerability brokers - hacktivists
What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.) Privilege levels must be set to permit access control to specific device interfaces, ports, or slots. Assigning a command with multiple keywords allows access to all commands using those keywords. Only a root user can add or remove commands. Commands from a lower level are always executable at a higher level. AAA must be enabled.
Assigning a command with multiple keywords allows access to all commands using those keywords. Commands from a lower level are always executable at a higher level.
What is a secure configuration option for remote access to a network device? Configure 802.1x. Configure Telnet. Configure SSH. Configure an ACL and apply it to the VTY lines.
Configure SSH.
A company deploys a hub-and-spoke VPN topology where the security appliance is the hub and the remote VPN networks are the spokes. Which VPN method should be used in order for one spoke to communicate with another spoke through the single public interface of the security appliance? - split tunneling - MPLS - GRE - Hairpinning
Hairpinning
In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server? RADIUS 802.1x SSH TACACS
RADIUS
What is the default preconfigured interface for the outside network on a Cisco ASA 5505? - VLAN 2 - Ethernet 0/2 - Ethernet 0/1 - VLAN 1
VLAN 2
A user successfully logs in to a corporate network via a VPN connection. Which part of the AAA process records that a certain user performed a specific operation at a particular date and time? - authentication - accounting - access - authorization
accounting
On what switch ports should BPDU guard be enabled to enhance STP stability? - only ports that attach to a neighboring switch - all PortFast-enabled ports - all trunk ports that are not root ports - only ports that are elected as designated ports
all PortFast-enabled ports
Which security policy outlines the overall security goals for managers and technical personnel within an organization and includes the consequences of noncompliance with the policy? - end-user policy - application policy - governing policy - technical policy
governing policy
Which feature is specific to the Security Plus upgrade license of an ASA 5505 and provides increased availability? - redundant ISP connections - routed mode - transparent mode - stateful packet inspection
redundant ISP connections
A network technician is attempting to resolve problems with the NAT configuration on anASA. The technician generates a ping from an inside host to an outside host. Whichcommand verifies that addresses are being translated on the ASA? - show ip nat translation - show running-config - show xlate - show ip address
show xlate
What determines which switch becomes the STP root bridge for a given VLAN? - the lowest bridge ID - the highest MAC address - the highest priority - the lowest IP address
the lowest bridge ID
What is a function of the GRE protocol? - to configure the set of encryption and hashing algorithms that will be used to transform the data sent through the IPsec tunnel - to provide encryption through the IPsec tunnel - to configure the IPsec tunnel lifetime - to encapsulate multiple OSI Layer 3 protocol packet types inside an IP tunnel
to encapsulate multiple OSI Layer 3 protocol packet types inside an IP tunnel