. When configuring router security, which statement describes the most effective way to use ACLs to control Telnet traffic that is destined to the router itself?
A) The ACL must be applied to each vty line individually
B) The ACL is applied to the Telnet port with the IP ACCESS-GROUP command
C) A.     Apply the ACL to the vty lines without the IN or OUT option required when applying ACLs to interfaces.
D) A.     The ACL should be applied to all vty lines in the _in_ direction to prevent an unwanted user from connecting to an unsecured port.
ANSWER: D
A cleaner attempts to enter a computer lab but is denied entry by the receptionist because there is no scheduled cleaning for that day. What type of attack was just prevented?
A) A.     Shoulder surfing
B) A.     War driving
C) A.     Social engineering
D) A.     Phishing
ANSWER: C
A computer can access devices on the same network but cannot access devices on other networks. What is the probable cause of this problem?
A) The computer has an invalid default gateway address.
B) The cable is not connected properly to the NIC.
C) The computer has an incorrect subnet mask.
D) The computer has an invalid IP address
ANSWER: A
A network administrator wants to examine the active NAT translations on a border router. Which command would perform the task?
A)   Router# SHOW IP NAT TRANSLATIONS
B)  Router# SHOW IP NAT STATISTICS
C)  Router# CLEAR IP NAT TRANSLATIONS
D)    Router# DEBUG IP NAT TRANSLATIONS
ANSWER: A
A network technician issues the following commands when configuring a router:R1(config)# ROUTER OSPF 11R1(config-router)# NETWORK 10.10.10.0 0.0.0.255 AREA 0What does the number 11 represent?
A) the cost of the link to R1
B) the autonomous system number to which R1 belongs
C) the administrative distance that is manually assigned to R1
D)  the OSPF process ID on R1
ANSWER: D
In an OSPFv2 configuration, what is the effect of entering the command NETWORK 192.168.1.1  0.0.0.0 AREA 0?
A) A.     It enables OSPF on all interfaces on the router.
B) A.     It changes the router ID of the router to 192.168.1.1
C) A.     It tells the router which interface to turn on for the OSPF routing process.
D) A.     It allows all 192.168.1.0 networks to be advertised.
ANSWER: C
In applying an ACL to a router interface, which traffic is designated as outbound?
A) Traffic that is coming from the source IP address into the router
B) Traffic that is leaving the router and going toward the destination host
C)  Traffic that is going from the destination IP address into the router
D)  Traffic for which the router can find no routing table entry
ANSWER: B
To facilitate the troubleshooting process, which inbound ICMP message should be permitted on an outside interface?
A) Echo request
B)   Echo reply
C) Time-stamp request
D) Router advertisement
ANSWER: B
What command would be used to determine if a routing protocol-initiated relationship had been made with an adjacent router?
A) A.     show ip interface brief
B) A.     show ip ospf neighbor
C) A.     show ip protocols
D) A.     ping 
ANSWER: B
What is a collapsed core in a network design?
A)    A combination of the functionality of the access and distribution layers
B)  A combination of the functionality of the distribution and core layers
C)    A combination of the functionality of the access and core layers
D) A combination of the functionality of the access, distribution, and core layers
ANSWER: B
What is a disadvantage of NAT?
A) There is no end-to-end addressing
B) The router does not need to alter the checksum of the IPv4 packets.​
C) The internal hosts have to use a single public IPv4 address for external communication.
D) The costs of readdressing hosts can be significant for a publicly addressed network.​
ANSWER: A
What is a function of the distribution layer?
A) Fault isolation
B) Network access to the user
C) High-speed backbone connectivity
D)  Interconnection of large-scale networks in wiring closets
ANSWER: D
What is a security feature of using NAT on a network?
A) A.     Allows external IP addresses to be concealed from internal users
B) A.     Allows internal IP addresses to be concealed from external users
C) A.     Denies all packets that originate from private IP addresses
D) A.     Denies all internal hosts from communicating outside their own network
ANSWER: B
What is a type of VPN that is generally transparent to the end user?
A)   Site-to-site
B)  Remote access
C)  Public
D)  Private
ANSWER: A
What is the default administrative distance of OSPF?
A) A.     120
B) 100
C) 90
D) 110
ANSWER: D
What is the term that is used for the area of a network that is affected when a device or network service experiences problems?
A)  Failure domain
B) Collision domain
C) Broadcast domain
D)    User domain
ANSWER: A
What is used to facilitate hierarchical routing in OSPF?
A) A.     autosummarization
B) A.     the use of multiple areas
C) A.     the election of designated routers
D) A.     frequent SPF calculations
ANSWER: B
What packets would match the access control list statement that is shown below?ACCESS-LIST 110 PERMIT TCP 172.16.0.0 0.0.0.255 ANY EQ 22
A) A.     SSH traffic from the 172.16.0.0 network to any destination network
B) A.     SSH traffic from any source network to the 172.16.0.0 network
C) A.     Any TCP traffic from any host to the 172.16.0.0 network
D) A.     Any TCP traffic from the 172.16.0.0 network to any destination network
ANSWER: A
WHAT WILL AN OSPF ROUTER PREFER TO USE FIRST AS A ROUTER ID?
A) A.     the highest active interface that participates in the routing process because of a specifically configured network statement
B) A.     any IP address that is configured using the router-id command
C) A.     the highest active interface IP that is configured on the router
D) A.     a loopback interface that is configured with the highest IP address on the router
ANSWER: D
When creating an ACL, which keyword should be used to document and interpret the purpose of the ACL statement on a Cisco device?​
A)  eq
B)  established
C) remark
D)  description
ANSWER: C
Which access list statement permits HTTP traffic that is sourced from host 10.1.129.100 port 4300 and destined to host 192.168.30.10?
A)  access-list 101 permit tcp any eq 4300
B) access-list 101 permit tcp 192.168.30.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255
C) access-list 101 permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.30.10 0.0.0.0 eq www
D) access-list 101 permit tcp 10.1.128.0 0.0.1.255 eq 4300 192.168.30.0 0.0.0.15 eq www
ANSWER: D
Which command is used to verify that OSPF is enabled and also provides a list of the networks that are being advertised by the network?​
A)  show ip interface brief
B) show ip ospf interface
C) show ip protocols
D) show ip route ospf
ANSWER: C
Which command will verify the number of packets that are permitted or denied by an ACL that restricts SSH access?
A) A.     show running-config
B) A.     show ip interface brief
C) A.     show access-lists
D) show ip ssh
ANSWER: C
Which cyber-attack involves a coordinated attack from a botnet of zombie computers?
A) DDoS
B) MITM
C) ICMP redirect
D) Address spoofing
ANSWER: A
Which function is supplied by the access layer in a three-layer network design?
A) High-speed connectivity
B) Application of policies
C)  Network access
D)   Backbone connectivity
ANSWER: C
Which location is recommended for extended numbered or extended named ACLs?
A) A location as close to the destination of traffic as possible
B)  A location as close to the source of traffic as possible
C)    A location centered between traffic destinations and sources to filter as much traffic as possible
D)  If using the ESTABLISHED keyword, a location close to the destination to ensure that return traffic is allowed
ANSWER: B
Which network design solution will best extend access layer connectivity to host devices?
A)   Implementing EtherChannel
B)   Implementing wireless connectivity
C)  Implementing redundancy
D) Implementing routing protocols
ANSWER: B
Which objective of secure communications is achieved by encrypting data?
A)  Availability
B)  Confidentiality
C) Integrity
D) integrity
ANSWER: B
Which range represents all the IP addresses that are affected when network 10.120.160.0 with a wildcard mask of 0.0.7.255 is used in an ACE?
A) 10.120.160.0 to 10.127.255.255
B) 10.120.160.0 to 10.120.167.255
C) 10.120.160.0 to 10.120.168.0
D) 10.120.160.0 to 10.120.191.255
ANSWER: B
Which scenario would cause an ACL misconfiguration and deny all traffic?
A) Apply a standard ACL in the inbound direction
B) A.     Apply a named ACL to a VTY line.
C) A.     Apply an ACL that has all DENY ACE statements.
D) A.     Apply a standard ACL using the IP ACCESS-GROUP OUTcommand.
ANSWER: C
Which statement accurately describes dynamic NAT?
A)  It always maps a private IP address to a public IP address.
B) It provides an automated mapping of inside local to inside global IP addresses.
C)  It provides a mapping of internal host names to IP addresses.
D)  It dynamically provides IP addressing to internal hosts.
ANSWER: B
Which type of BGP session can be established between 2 routers from different autonomous systems?
A) I-BGP session
B) E-BGP session
C) W-BGP session
D) O-BGP session
ANSWER: B
Which version of NAT allows many hosts inside a private network to simultaneously use a single inside global address for connecting to the Internet?
A)   PAT
B)  Static NAT
C)  Dynamic NAT
D)  Port forwarding
ANSWER: A
Why is a Border Gateway Protocol (BGP) session used in between routers?
A) To transmit the packets
B) To send the AS path
C) To interchange the routing information
D) To communicate with other AS
ANSWER: C
Why would a network administrator issue the SHOW CDP NEIGBORS command on a router?
A)  To display device ID and other information about directly connected Cisco devices
B) To display router ID and other information about OSPF neighbors
C)   To display line status and other information about directly connected Cisco devices
D)  To display routing table and other information about directly connected Cisco devices
ANSWER: A
