Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
SA - Networking 3
SA1[M1-3] Networking 3 / IT0103
| Question | Answer |
|---|---|
| Applying the least privilege principle means: | Granting minimal necessary access |
| Phishing is an example of which type of threat? | Social engineering |
| In single-area OSPF, all routers share the same: | Link-state database |
| True or False: ACLs must always be explicitly applied to interfaces. | True |
| A named standard ACL is created with: | ip access-list standard NAME |
| A VPN primarily ensures which security principle? | Confidentiality |
| Which command shows currently configured ACLs? | show ip access-lists |
| A best practice for ACL efficiency is to: | Place extended ACLs near the source |
| Standard IPv4 ACLs are identified by numbers: | 1–99, 1300–1999 |
| Which OSPF database contains complete topology information? | Link-state database |
| OSPF convergence is generally faster than RIP because it: | Uses link-state and SPF algorithm |
| Which wildcard mask matches only the host 10.1.1.1? | 0.0.0.0 |
| Which of the following best describes a Designated Router (DR) on a broadcast network? | The router with highest router ID |
| ACLs can also be configured to log matches for: | Diagnostic purposes |
| Which command shows OSPF neighbors? | show ip ospf neighbor |
| Which OSPF message is used to establish adjacency? | HELLO |
| To configure ACL entries manually and name them “SALES”, use: | ip access-list extended SALES |
| Which command removes ACL 50 from an interface? | no ip access-group 50 in |
| Extended ACLs can filter traffic by: | Source, destination, protocol, and port |
| Which interface type does not elect a DR or BDR? | Point-to-point |
| Which ACL type provides the most granular filtering? | Extended |
| Which command sets up OSPF with process ID 10? | router ospf 10 |
| Which command verifies OSPF routes in the routing table? | show ip route ospf |
| After applying ACL, to confirm its operation, use: | show access-lists |
| In single-area OSPF, which area is always required? | Area 0 |
| Keeping systems patched mainly helps guard against: | Known vulnerabilities |
| Which ACL type is limited and inefficient for complex filtering? | Standard |
| Which command begins defining ACL 10? | access-list 10 permit … |
| ACLs can also serve to: | Restrict administrative access |
| Extended IPv4 ACL numbers span: | 100–199, 2000–2699 |
| ACLs are typically applied on: | Routers or layer-3 devices |
| To allow only subnet 192.168.10.0/24, the wildcard mask is: | 0.0.0.255 |
| What benefit does OSPF area structure provide? | Hierarchical scaling |
| To deny all other traffic not previously permitted, you should: | Implicit deny does the job; no need to add |
| Which command applies ACL 100 inbound on interface GigabitEthernet0/1? | ip access-group 100 in |
| The primary purpose of ACLs is to: | Filter network traffic |
| Which vulnerability is exploited by intercepting communications between two parties? | Man-in-the-middle |
| What does the “CIA triad” stand for in network security? | Confidentiality, Integrity, Availability |
| Which routing protocol is classified as a link-state protocol? | OSPFv2 |
| What component enforces user privilege levels in network devices? | AAA (Authentication, Authorization, Accounting) |
| What type of OSPF network requires a DR and BDR election? | Broadcast multiaccess |
| What identifies each OSPF router uniquely? | Router ID |
| What is the default behavior for traffic not explicitly permitted or denied in an ACL? | Denied (implicit deny) |
| An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 192.168.223.0 255.255.254.0. What wildcard mask would the administrator use in the OSPF network statement? | 0.0.1.255 |
| What command would be used to determine if a routing protocol-initiated relationship had been made with an adjacent router? | show ip ospf neighbor |
| In an OSPFv2 configuration, what is the effect of entering the command network 192.168.1.1 0.0.0.0 area 0 ? | It tells the router which interface to turn on for the OSPF routing process. |
| _______________________________________________________________________ | _______________________________________________________________________ |
| Match the OSPF state with the order in which it occurs. | _______________________________________________________________________ |
| first state | Down state |
| second state | Init state |
| third state | Two-Way state |
| fourth state | ExStart state |
| fifth state | Exchange state |
| sixth state | Loading state |
| seventh state | Full state |
| _______________________________________________________________________ | _______________________________________________________________________ |
| What is the reason for a network engineer to alter the default reference bandwidth parameter when configuring OSPF? | to more accurately reflect the cost of links greater than 100 Mb/s |
| Which step in the link-state routing process is described by a router sending Hello packets out all of the OSPF-enabled interfaces? | establishing neighbor adjacencies |
| Which step in the link-state routing process is described by a router running an algorithm to determine the best path to each destination? | executing the SPF algorithm |
| An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 198.19.0.0 255.255.252.0. What wildcard mask would the administrator use in the OSPF network statement? | 0.0.3.255 |
| An OSPF router has three directly connected networks; 172.16.0.0/16, 172.16.1.0/16, and 172.16.2.0/16. Which OSPF network command would advertise only the 172.16.1.0 network to neighbors? | router(config-router)# network 172.16.1.0 0.0.0.0 area 0 |
| By default, what is the OSPF cost for any link with a bandwidth of 100 Mb/s or greater? | 1 |
| What is the recommended Cisco best practice for configuring an OSPF-enabled router so that each router can be easily identified when troubleshooting routing issues? | Configure a value using the router-id command. |
| An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 128.107.0.0 255.255.255.192. What wildcard mask would the administrator use in the OSPF network statement? | 0.0.0.63 |
| A network engineer has manually configured the hello interval to 15 seconds on an interface of a router that is running OSPFv2. By default, how will the dead interval on the interface be affected? | the dead interval will now be 60 seconds. |
| What are the two purposes of an OSPF router ID? (Choose two.) | to facilitate router participation in the election of the designated router | to uniquely identify the router within the OSPF domain |
| What is a function of OSPF hello packets? | to discover neighbors and build adjacencies between them |
| An administrator is configuring single-area OSPF on a router. One of the networks that must be advertised is 192.168.181.0 255.255.254.0. What wildcard mask would the administrator use in the OSPF network statement? | 0.0.1.255 |
| Which type of OSPFv2 packet contains an abbreviated list of the LSDB of a sending router and is used by receiving routers to check against the local LSDB? | database description |
| Which step does an OSPF-enabled router take immediately after establishing an adjacency with another router? | exchanges link-state advertisements |
| Which three statements describe features of the OSPF topology table? | when converged, all routers in an area have identical topology tables | it is a link-state database that represents the network topology | the table can be viewed via the show ip ospf database command |
| To establish a neighbor adjacency two OSPF routers will exchange hello packets. Which two values in the hello packets must match on both routers? | hello interval | dead interval |
| What type of malware has the primary objective of spreading across the network? | worm |
| A technician is tasked with using ACLs to secure a router. When would the technician use the deny configuration option or command? | to restrict specific traffic access through an interface |
| Which requirement of secure communications is ensured by the implementation of MD5 or SHA hash generating algorithms? | integrity |
| A user receives a phone call from a person who claims to represent IT services and then asks that user for confirmation of username and password for auditing purposes. Which security threat does this phone call represent? | social engineering |
| What wild card mask will match networks 172.16.0.0 through 172.19.0.0? | 0.3.255.255 |
| A technician is tasked with using ACLs to secure a router. When would the technician use the no ip access-list 101 configuration option or command? | to remove a configured ACL |
| If an asymmetric algorithm uses a public key to encrypt data, what is used to decrypt it? | a private key |
| A technician is tasked with using ACLs to secure a router. When would the technician use the ‘ip access-group 101 in’ configuration option or command? | to apply an extended ACL to an interface |
| Which set of access control entries would allow all users on the 192.168.10.0/24 network to access a web server that is located at 172.17.80.1, but would not allow them to use Telnet? | access-list 103 permit tcp 192.168.10.0 0.0.0.255 host 172.17.80.1 eq 80 access-list 103 deny tcp 192.168.10.0 0.0.0.255 any eq 23 |
| Which ACE will permit a packet that originates from any network and is destined for a web server at 192.168.1.1? | access-list 101 permit tcp any host 192.168.1.1 eq 80 |
| What does the CLI prompt change to after entering the command ip access-list standard aaa from global configuration mode? | Router(config-std-nacl)# |
| What is a feature of an IPS? | It can stop malicious packets. |
| A technician is tasked with using ACLs to secure a router. When would the technician use the remark configuration option or command? | to add a text entry for documentation purposes |
| What is the term used to describe a potential danger to a company’s assets, data, or network functionality? | threat |
| A technician is tasked with using ACLs to secure a router. When would the technician use the access-class 20 in configuration option or command? | to secure administrative access to the router |
| In what way are zombies used in security attacks? | They are infected machines that carry out a DDoS attack. |
| A technician is tasked with using ACLs to secure a router. When would the technician use the any configuration option or command? | to identify any IP address |
| What is a ping sweep? | a network scanning technique that indicates the live hosts in a range of IP addresses. |
Created by:
Jsean-Ed