click below
click below
Normal Size Small Size show me how
networking3 fa 1
| Question | Answer |
|---|---|
| Which device inspects traffic for malicious patterns and blocks attacks? | Intrusion Prevention System (IPS) |
| In single-area OSPF, all routers share the same: | Link-state database |
| Extended IPv4 ACL numbers span: | 100–199, 2000–2699 |
| Which ACL type is limited and inefficient for complex filtering? | Standard |
| What benefit does OSPF area structure provide? | Hierarchical scaling |
| What does ACL stand for? | Access Control List |
| Applying the least privilege principle means: | Granting minimal necessary access |
| To configure ACL entries manually and name them “SALES”, use: | ip access-list extended SALES |
| Which command removes ACL 50 from an interface? | no ip access-group 50 in |
| True or False: ACLs must always be explicitly applied to interfaces. | True |
| Standard ACLs filter based on: | Source IP only |
| Which vulnerability is exploited by intercepting communications between two parties? | Man-in-the-middle |
| ACLs are typically applied on: | Routers or layer-3 devices |
| Which interface type does not elect a DR or BDR? | Point-to-point |
| The primary purpose of ACLs is to: | Filter network traffic |
| ACLs can also be configured to log matches for: | Diagnostic purposes |
| In single-area OSPF, which area is always required? | Area 0 |
| After applying ACL, to confirm its operation, use: | show access-lists |
| What component enforces user privilege levels in network devices? | AAA (Authentication, Authorization, Accounting) |
| A named standard ACL is created with: | ip access-list standard NAME |
| Which routing protocol is classified as a link-state protocol? | OSPFv2 |
| What identifies each OSPF router uniquely? | Router ID |
| Which command advertises 192.168.1.0/24 network in OSPF? | network 192.168.1.0 0.0.0.255 area 0 |
| What does the “CIA triad” stand for in network security? | Confidentiality, Integrity, Availability |
| Which wildcard mask matches only the host 10.1.1.1? | 0.0.0.0 |
| What is the default behavior for traffic not explicitly permitted or denied in an ACL? | Denied (implicit deny) |
| Which command applies ACL 100 inbound on interface GigabitEthernet0/1? | ip access-group 100 in |
| Which OSPF message is used to establish adjacency? | HELLO |
| OSPF convergence is generally faster than RIP because it: | Uses link-state and SPF algorithm |
| Which command shows OSPF neighbors? | show ip ospf neighbor |
| ACLs can also serve to: | Restrict administrative access |
| A VPN primarily ensures which security principle? | Confidentiality |
| Which command begins defining ACL 10? | access-list 10 permit … |
| Extended ACLs can filter traffic by: | Source, destination, protocol, and port |
| Weak or default passwords create which kind of vulnerability? | Configuration-based |
| Which command verifies OSPF routes in the routing table? | show ip route ospf |
| A best practice for ACL efficiency is to: | Place extended ACLs near the source |
| Keeping systems patched mainly helps guard against: | Known vulnerabilities |
| Where should a standard ACL be placed to control traffic effectively? | As close to the destination as possible |
| Phishing is an example of which type of threat? | Social engineering |
| Which command sets up OSPF with process ID 10? | router ospf 10 |
| Which ACL type provides the most granular filtering? | Extended |
| What type of OSPF network requires a DR and BDR election? | Broadcast multiaccess |
| Standard IPv4 ACLs are identified by numbers: | 1–99, 1300–1999 |
| To deny all other traffic not previously permitted, you should: | Implicit deny does the job; no need to add |