Networking Quiz (Regionals)
What range of IP addresses is represented by the network and wildcard mask 192.168.70.0 0.0.0.127?
192.168.70.0 to 192.168.70.127
What range of IP addresses is represented by the network and wildcard mask 192.168.70.0 0.0.1.255?
192.168.70.0 to 192.168.71.255
1 - access-list 100 permit tcp host 10.0.55.23 host 10.0.70.55 eq 1719 2 - access-list 100 permit tcp host 10.0.55.23 host 10.0.70.55 eq 1720 3 - access-list 100 deny tcp any any eq 443 4 - access-list 100 deny tcp any any eq www 5 - access-list 100 permit ip any any
3
Which set of access control entries would allow all users on the 192.168.10.0/24 network to access a web server that is located at 172.17.80.1, but would not allow them to use Telnet?
access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23
Which two statements are correct about extended ACLs? (Choose two)
- Extended ACLs evaluate the source and destination addresses. - Port numbers can be used to add greater definition to an ACL.
The wildcard mask that is associated with the network 192.168.12.0/24 is
0.0.0.255
The wildcard mask that is associated with 192.168.12.96/27 is
0.0.0.31
The wildcard mask that is associated with 128.165.216.0/23 is
0.0.1.255
The wildcard mask that is associated with 152.115.128.0/17 is
0.0.127.255
Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
10.120.160.0 to 10.120.167.255
What is the default privilege level of user accounts created on Cisco routers?
15
What range of IP addresses is represented by the network and wildcard mask 172.16.32.0 0.0.15.255?
172.16.32.0 to 172.16.47.255
How many addresses will be available for dynamic NAT translation when a router is configured with the following commands? Router(config)#ip nat pool TAME 209.165.201.23 209.165.201.30 netmask 255.255.255.224 Router(config)#ip nat inside source list 9 pool TAME
8
What tool is available through the Cisco IOS CLI to initiate security audits and to make recommended configuration changes with or without administrator input?
Cisco AutoSecure
Which message does an IPv4 host use to reply when it receives a DHCPOFFER message from a DHCP server?
DHCPREQUEST
What must be done before any role-based CLI views can be created?
Issue the aaa new-model command.
How can an administrator disable access to ROMMON mode on a Cisco router to prevent unauthorized password recovery?
Issue the no service password-recovery command.
What is the purpose of entering the command ip nat inside source static tcp 192.168.10.2 80 209.165.200.223 8080 at the global configuration prompt?
It binds the inside local address and local port to the specified inside global address and global port.
What is the most likely scenario in which the WAN interface of a router would be configured as a DHCP client to be assigned a dynamic IP address from an ISP?
It is a SOHO or home broadband router
What is correct in relation to NAT for IPv6?
It is a temporary mechanism to assist in the migration from IPv4 to IPv6.
What security function does Cisco ACS provide?
It provides centralized TACACS+ and RADIUS authentication.
What are two benefits of NAT? (Choose two.)
It saves public IP addresses. It adds a degree of privacy and security to a network.
Which method is used by a PAT-enabled router to send incoming packets to the correct inside hosts?
It uses the destination TCP or UDP port number on the incoming packet.
What is true regarding the differences between NAT and PAT?
PAT uses unique source port numbers to distinguish between translations.
Which series of commands will cause access list 15 to restrict Telnet access on a router?
R1(config)# line vty 0 4 R1(config-line)# access-class 15 in
Which command will allow a network administrator to check the IP address that is assigned to a particular MAC address?
Router# show ip dhcp binding
A network administrator wants to examine the active NAT translations on a border router. Which command would perform the task?
Router# show ip nat translations
In which alternative to DHCPv6 does a router dynamically provide IPv6 configuration information to hosts?
SLAAC
An administrator has been asked to configure basic access security on a router, including creating secure passwords and disabling unattended connections. Which three actions accomplish this and use recommended security practices to do so? (Choose three.)
Set the minimum password length to 10 characters. Set the executive timeout parameters on the vty lines to 3 and 0. Enable the password encryption service for the router.
Match the DHCP message types to the order of the DHCPv4 process. (Not all options are used.)
Step 1 - DHCPDISCOVER Step 2 - DHCPOFFER Step 3 - DHCPREQUEST Step 4 - DHCPACK
Match the DHCP message types to the order of the stateful DHCPv6 process when a client first connects to an IPv6 network. (Not all options are used.)
Step 1 - DHCPv6 SOLICIT Step 2 - DHCPv6 ADVERTISE Step 3 - DHCPv6 REQUEST Step 4 - DHCPv6 REPLY
When a client is requesting an initial address lease from a DHCP server, why is the DHCPREQUEST message sent as a broadcast?
The client may have received offers from multiple servers, and the broadcast serves to implicitly decline those other offers.
After booting, a client receives an ICMPv6 RA message with the M flag set to 0 and the O flag set to 1. What does this indicate?
The client should automatically configure an IPv6 address and then contact a DHCPv6 server for more information.
An administrator has configured a DHCPv4 relay router and issued these commands: Router(config)# interface g0/0 Router(config-if)# ip address 10.0.1.1 255.255.255.0 Router(config-if)# no shutdown Router(config-if)# exit Router(config)# ip dhcp pool RELAY Router(dhcp-config)# end The clients are not receiving IP parameters from the DHCPv4 server. What is a possible cause?
The ip helper-address command is missing.
What is the effect of the established parameter in an extended ACL?
allows external traffic into a network only if it is part of an existing connection with an internal host
What three configuration steps must be performed to implement SSH access to a router? (Choose three.)
an IP domain name a user account a unique hostname
A network administrator configures the border router with the command R1(config)# ip nat inside source list 4 pool corp. Which ACL is required to be configured in order for this command to function?
an access list that is numbered 4 that defines the private addresses that are affected by NAT
Which two tasks are associated with router hardening? (Choose two.)
disabling unused ports and interfaces securing administrative access
A company designs its network so that the PCs in the internal network are assigned IP addresses from DHCP servers, and the packets that are sent to the Internet are translated through a NAT-enabled router. What type of NAT enables the router to populate the translation table from a pool of unique public addresses, as the PCs send packets through the router to the Internet?
dynamic NAT
Which command should be configured on a router interface to set the router as a stateful DHCPv6 client?
ipv6 address dhcp
Which command is used to activate an IPv6 ACL named ENG_ACL on an interface so that the router filters traffic prior to accessing the routing table?
ipv6 traffic-filter ENG_ACL in
A network administrator needs to protect a router against brute force login attempts. What is the correct login-block-for command syntax to disable login for 3 minutes if more than 3 failed attempts are made within a 2 minute period?
login block-for 180 attempts 3 within 120
What are the two types of community strings available for authenticating SNMP messages? (Choose two.)
read-only read-write
An administrator is troubleshooting a DHCPv4 issue on a router. By issuing the debug ip dhcp _________ command, the administrator can watch, in real time, the IP address assignments that are performed by the router.
server events server event
What are two SNMP messages types that are sent by SNMP managers to SNMP agents? (Choose two.)
set get
ACLs are used primarily to filter traffic. What are two additional uses of ACLs? (Choose two.)
specifying internal hosts for NAT identifying traffic for QoS
When configuring NAT on a Cisco router, what is the inside local IP address?
the IP address of an inside host as it appears to the inside network
In the creation of an IPv6 ACL, what is the purpose of the implicit final command entries, permit icmp any any nd-na and permit icmp any any nd-ns?
to allow IPv6 to MAC address resolution
In applying an ACL to a router interface, which traffic is designated as outbound?
traffic that is leaving the router and going toward the destination host
