Latest ccna security online dump questions test for free with explanations and score card Part 2| INfibee.com

Give Your Feedback

	Name

	Email

	Feedback

Home

General Knowledge
General Aptitude
General English
Networking
Interview Questions
- .NET
- Java
- ASP.NET
- C++
- Perl
- Python
- Ruby and Rails
- Struts
- Core Java
- Hibernate
- DB2
- MS SQL Server
- MySQL
- Oracle
- SQL
- DBMS
- Data Warehousing
- Data structures and Algorithms
- CCNA
- CCNP Routing
- CCNP Switching
- Internetworking
- Border Gateway Protocol
- MCSE
- Exchange Server
- Windows Server 2008
- DNS & Active Directory
- Firewall Questions
- Unix
- Linux Server Administrator
- Linux System Administrator
- Linux File Manipulation
Database

Instructions

Total Questions 20
Each question carry 1 mark
Must answer all the questions (otherwise report card will not be generated)
If you dont want to take a test, simply click the check answers button and view all the answers with explanations
Do Not Refresh the Page
No Time Limit
Good Luck :)

You Scored % - /

1. Which technology is a primary method that IPsec uses to implement data integrity?

A.
MD5
B.
AES
C.
RSA
D.
DH

Correct Answers :

[A]

Explanation :

2. What are the source and destination addresses used for an encrypted IPsec packet?

A.
Original sender and receiver IP addresses
B.
Original sender’s and outbound VPN gateway’s addresses
C.
Sending and receiving VPN gateways
D.
Sending VPN gateway and original destination address in the packet

Correct Answers :

[C]

Explanation :

3. Which phase is used for private management traffic between the two VPN peers?

A.
IPsec
B.
IKE Phase 1
C.
IKE Phase 2
D.
IKE Phase 3

Correct Answers :

[B]

Explanation :

4. Which of the following are negotiated during IKE Phase 1?

A.
Hashing
B.
DH group
C.
Encryption
D.
Authentication method

Correct Answers :

[A, B, C, D]

Explanation :

The DHCP Negative Acknowledgment (NACK) message is issued by the DHCP server to the client when a client requests an IP address the DHCP cannot lease. This often happens when two DHCP servers are misconfigured in the same LAN with two different scopes. One server will issue the NACK message when it hears the request destined for the other DHCP server.

5. What method is used to allow two VPN peers to establish shared secret keys and to establish those keys over an untrusted network?

A.
AES
B.
SHA
C.
RSA
D.
DH

Correct Answers :

[D]

Explanation :

The Cisco Dynamic Multipoint Virtual Private Network (DMVPN) is alwaysconfigured in a hub-and-spoke topology. The central router creates a multiport GRE connection between all of the branch routers.

6. Which of the following could be part of both an IKEv1 Phase 1 and IKEv1 Phase 2 policy? (Choose all that apply.)

A.
MD5
B.
AES
C.
RSA
D.
DH

Correct Answers :

[A, B, D]

Explanation :

7. How is it possible that a packet with a private Layer 3 destination address is forwarded over the Internet?

A.
It is encapsulated into another packet, and the Internet only sees the outside valid IP destination address.
B.
It cannot be sent. It will always be dropped.
C.
The Internet does not filter private addresses, only some public addresses, based on policy.
D.
NAT is used to change the destination IP address before the packet is sent.

Correct Answers :

[A]

Explanation :

8. What is the method for specifying the IKEv1 Phase 2 encryption method?

A.
Crypto ACLs
B.
crypto isakmp policy
C.
crypto ipsec transform-set
D.
RSA signatures

Correct Answers :

[C]

Explanation :

9. Which of the following potentially could be negotiated during IKEv1 Phase 2? (Choose all that apply.)

A.
Hashing
B.
DH group
C.
Encryption
D.
Authentication method

Correct Answers :

[A, B, C]

Explanation :

10. Which of the DH groups is the most prudent to use when security is of the utmost importance?

A.
1
B.
2
C.
5
D.
6

Correct Answers :

[C]

Explanation :

11. Which SSL solution is most appropriate for a remote user who is at a borrowed computer and needs access to a single server at the central office?

A.
SSL thin client
B.
SSL clientless VPN
C.
Cisco AnyConnect Secure Mobility Client SSL VPN client
D.
IPsec VPN client

Correct Answers :

[B]

Explanation :

12. Which of the following solutions assigns a virtual IP address to the remote user to use for traffic sent over the SSL VPN to the server?

A.
SSL thin client
B.
SSL clientless VPN
C.
Cisco AnyConnect Secure Mobility Client
D.
IPsec VPN client

Correct Answers :

[C]

Explanation :

13. What is the immediate cost savings when implementing SSL VPNs?

A.
No licensing is required on the server.
B.
No licensing is required on the clients.
C.
Easy deployment.
D.
SSL VPN licenses are significantly less expensive on the server than IPsec licenses.

Correct Answers :

[C]

Explanation :

14. How does an SSL client send the desired shared secret to the server?

A.
AES.
B.
Encrypts it with the server’s public key.
C.
Encrypts it with the sender’s public key.
D.
They use DH to negotiate the shared secret.

Correct Answers :

[B]

Explanation :

15. Which of the following is not part of configuring the clientless SSL VPN on the ASA?

A.
Launching the wizard
B.
Specifying the URL
C.
Configuring bookmarks
D.
Configuring a pool of IP addresses for the remote users to use

Correct Answers :

[D]

Explanation :

16. Which is the primary Layer 2 mechanism that allows multiple devices in the same VLAN to communicate with each other even though those devices are physically connected to different switches?

A.
IP address
B.
Default gateway
C.
Trunk
D.
802.1D

Correct Answers :

[C]

Explanation :

In the exhibit, packets are being sent to the router via a trunk link. A setup where the packets for VLANs are sent to a router for routing between VLANs is called Router on a Stick (ROAS) routing.

17. How does a switch know about parallel Layer 2 paths?

A.
802.1Q
B.
BPDU
C.
CDP
D.
NTP

Correct Answers :

[B]

Explanation :

18. When implemented, which of the following helps prevent CAM table overflows?

A.
802.1w
B.
BPDU Guard
C.
Root Guard
D.
Port security

Correct Answers :

[D]

Explanation :

19. Which of the following is not a best practice for security?

A.
Leaving the native VLAN as VLAN 1
B.
Shutting down all unused ports and placing them in an unused VLAN
C.
Limiting the number of MAC addresses learned on a specific port
D.
Disabling negotiation of switch port mode

Correct Answers :

[A]

Explanation :

20. What is the default number of MAC addresses allowed on a switch port that is configured with port security?

A.
1
B.
5
C.
15
D.
Depends on the switch model

Correct Answers :

[A]

Explanation :

Sitemap