click below
click below
Normal Size Small Size show me how
networking 3 f1
| Question | Answer |
|---|---|
| A VPN primarily ensures which security principle? Group of answer choices Availability Confidentiality Integrity Scalability | Confidentiality |
| Extended IPv4 ACL numbers span: Group of answer choices 100–199, 2000–2699 1–99, 1300–1999 3000–3999 500–599 | 100–199, 2000–2699 |
| What does ACL stand for? Group of answer choices Access Control List Active Control Layer Automated Configuration Logic Advanced Connection List | Access Control List |
| What is the default behavior for traffic not explicitly permitted or denied in an ACL? Group of answer choices Permitted Denied (implicit deny) Logged Redirected | Denied (implicit deny) |
| Which command shows OSPF neighbors? Group of answer choices show ip ospf route show ip ospf adjacency show ip ospf neighbor show ospf status | show ip ospf neighbor |
| Phishing is an example of which type of threat? Group of answer choices DoS Social engineering Worm Rootkit | Social engineering |
| Which command begins defining ACL 10? Group of answer choices access-list 10 permit … ip access 10 … acl 10 create start acl 10 | access-list 10 permit … |
| What type of OSPF network requires a DR and BDR election? Group of answer choices Point-to-point Broadcast multiaccess Virtual link Stub network | Broadcast multiaccess |
| Keeping systems patched mainly helps guard against: Group of answer choices Traffic bottlenecks Zero-day exploits Known vulnerabilities DDoS attacks | Known vulnerabilities |
| Which of the following best describes a Designated Router (DR) on a broadcast network? Group of answer choices The fastest router The router with highest router ID The first router to boot The router connected to the core switch | The router with highest router ID |
| Which command verifies OSPF routes in the routing table? Group of answer choices show ip route ospf show ospf routes show ip ospf routes show route ospf | show ip route ospf |
| In single-area OSPF, all routers share the same: Group of answer choices Routing table only Link-state database Configuration file MAC address table | Link-state database |
| What identifies each OSPF router uniquely? Group of answer choices IP address Area ID Router ID Default gateway | Router ID |
| The primary purpose of ACLs is to: Group of answer choices Encrypt traffic Filter network traffic Monitor bandwidth Summarize routes | Filter network traffic |
| What benefit does OSPF area structure provide? Group of answer choices Slower convergence Hierarchical scaling Traffic encryption Reduced link-state advertisements | Hierarchical scaling |
| Which routing protocol is classified as a link-state protocol? RIP EIGRP OSPFv2 BGP | OSPFv2 |
| Which OSPF database contains complete topology information? Routing table Link-state database Adjacency database Forwarding database | Link-state database |
| Which OSPF message is used to establish adjacency? HELLO DATA UPDATE LSACK | HELLO |
| In single-area OSPF, which area is always required? Area 1 Area 0 Any unique area Area 255 | Area 0 |
| Which device inspects traffic for malicious patterns and blocks attacks? Hub Switch Intrusion Prevention System (IPS) DHCP server | Intrusion Prevention System (IPS) |
| Applying the least privilege principle means: Giving all users full access Using default credentials Granting minimal necessary access Removing access restrictions | Granting minimal necessary access |
| Where should a standard ACL be placed to control traffic effectively? As close to the source as possible Anywhere in the network As close to the destination as possible On a switch only | As close to the source as possible |
| ACLs can also be configured to log matches for: Diagnostic purposes Enabling telnet Bandwidth management DHCP relay | Diagnostic purposes |
| Which command applies ACL 100 inbound on interface GigabitEthernet0/1? ip access-group 100 in access-list 100 in ip attr-list 100 inbound ip acl apply 100 in | ip access-group 100 in |
| Standard ACLs filter based on: Source IP only Destination IP only Port numbers Protocol type | Source IP only |
| After applying ACL, to confirm its operation, use: show ip ospf interface show access-lists show arp show vlan | show access-lists |
| Which command advertises 192.168.1.0/24 network in OSPF? network 192.168.1.0 0.0.0.255 area 0 advertise ip 192.168.1.0 255.255.255.0 area 0 ospf distribute 192.168.1.0 router ospf 0.0.0.255 | network 192.168.1.0 0.0.0.255 area 0 |
| To allow only subnet 192.168.10.0/24, the wildcard mask is: 0.0.0.255 0.0.255.0 255.255.255.0 0.255.255.255 | 0.0.0.255 |
| Which command sets up OSPF with process ID 10? | router ospf 10 |
| A named standard ACL is created with: Group of answer choices access-list NAME permit … ip access-list standard NAME named acl NAME acl standard NAME | ip access-list standard NAME |
| Standard IPv4 ACLs are identified by numbers: Group of answer choices 1–99, 1300–1999 100–199 200–299 300–399 | 1–99, 1300–1999 |
| What component enforces user privilege levels in network devices? Group of answer choices Firewall Access control list AAA (Authentication, Authorization, Accounting) IDS | AAA (Authentication, Authorization, Accounting) |
| Which of the following best describes a Designated Router (DR) on a broadcast network? Group of answer choices The fastest router The router with highest router ID The first router to boot The router connected to the core switch | The router with highest router ID |
| Extended ACLs can filter traffic by: Group of answer choices Source IP only Destination IP only Source, destination, protocol, and port Only port numbers | Source, destination, protocol, and port |
| A best practice for ACL efficiency is to: Group of answer choices Place standard ACLs near the source Place extended ACLs near the source Apply ACLs randomly Use wildcard masks incorrectly | Place extended ACLs near the source |
| Which action ensures the integrity of log files? Group of answer choices Disable logging Encrypt and backup logs Route logs through insecure paths Delete logs periodically | Encrypt and backup logs |
| Which ACL type is limited and inefficient for complex filtering? Group of answer choices Standard Extended Named Reflexive | Standard |
| What component enforces user privilege levels in network devices? Firewall Access control list AAA (Authentication, Authorization, Accounting) IDS | AAA (Authentication, Authorization, Accounting) |
| ACLs are typically applied on: End devices only Routers or layer-3 devices Printers Hubs | Routers or layer-3 devices |
| What does the “CIA triad” stand for in network security? Confidentiality, Integrity, Availability Control, Investigation, Assessment Confidentiality, Identity, Authentication Control, Integrity, Authorization | Confidentiality, Integrity, Availability |
| To deny all other traffic not previously permitted, you should: Place a deny all at the end Use log statement only Implicit deny does the job; no need to add Add allow any at the end | Implicit deny does the job; no need to add |
| True or False: ACLs must always be explicitly applied to interfaces. Group of answer choices True False | true |
| To configure ACL entries manually and name them “SALES”, use: Group of answer choices ip access-list extended SALES access-list SALES start named acl extended SALES acl SALES | ip access-list extended SALES |
| Which command shows currently configured ACLs? Group of answer choices show ip access-lists display acls show acl config show ip acls | show ip access-lists |
| What type of OSPF network requires a DR and BDR election? | broadcast |
| Which interface type does not elect a DR or BDR? Broadcast Multiaccess Point-to-point Non-broadcast | Point-to-point |
| Which ACL type provides the most granular filtering? Standard numbered Named standard Extended Implicit | Extended |
| Which wildcard mask matches only the host 10.1.1.1? Group of answer choices 0.0.0.0 255.255.255.255 0.0.0.255 255.255.255.0 | 0.0.0.0 |