Test on Enterprise Networking, Security, and Automation
Enterprise Networking, Security, & Automation Guide
Test: Cisco Networking Certification, Cisco Networking IOS & Configuration, Computer Networking, WAN, Network Protocols & Troubleshooting, VPN, Virtualization & Cloud, Routing Protocols - OSPF Fundamentals, Routing Protocols - OSPF Configuration, Network Security Penetration Testing, Network Administration & Automation, Cisco Networking, Cisco Networking NAT & Routing, Cisco Networking ACLs, Network Security Secure Communications, Cisco Data Center & ACI, Cryptography, Quality of Service
20 questions
Question 1: When configuring a standard ACL, a command like "access-list 10 permit tcp 192.168.1.0 0.0.0.255 any eq www" is used to filter traffic based on a source IPv4 address and destination port.
A. Ano
B. Ne
Explanation: Standard ACLs only filter traffic based on the source IPv4 address. Filtering based on destination ports or specific protocols like TCP with 'eq www' requires an extended ACL.
Question 2: A company policy requires that IP phone voice traffic from the 192.168.10.0/24 network needs priority over data traffic. Which is the best ACL type and placement to use to ensure that undesirable traffic is denied close to the source network?
A. extended ACL outbound on R2 WAN interface towards the internet
B. standard ACL inbound on R1 G0/0
C. extended ACL inbound on R1 G0/0
D. standard ACL outbound on R2 S0/0/1
Explanation: Extended ACLs permit or deny packets based on the source IPv4 address, destination IPv4 address, protocol type, source and destination TCP or UDP ports, and more. Because the filtering of extended ACLs is so specific, they should be located as close as possible to the source of the traffic to be filtered. Undesirable traffic is denied close to the source network without crossing the network infrastructure. In this scenario, placing an extended ACL inbound on R1 G0/0 would filter the voice traffic from the 192.168.10.0/24 network as it enters the router, closest to its source.
Question 3: The SNMPv3 'auth' security level combines authentication and encryption for the highest level of protection.
A. Ano
B. Ne
Explanation: The SNMPv3 'auth' security level authenticates a packet using either the HMAC with MD5 method or the SHA method. The 'authPriv' security level provides the highest level of protection by combining authentication with encryption.
Question 4: Which aspect of secure communications guarantees that the sender cannot deny having sent a message?
A. data integrity
B. data confidentiality
C. origin authentication
D. data nonrepudiation
Explanation: Secure communications includes data nonrepudiation, which guarantees that the sender cannot repudiate, or refute, the validity of a message sent.
Question 5: The SDN controller uses northbound APIs to communicate with upstream applications.
A. Ano
B. Ne
Explanation: The SDN controller uses northbound APIs to communicate with upstream applications, which helps administrators shape traffic and deploy services.