QUESTION 1
Which command must be configured to enable port security with a manually assigned MAC address of aabb.cc00.1234 for a VolP handset on VLAN 4?
A. switchport port-security mac-address aabb.cc00.1234
B. switchport port-security mac-address sticky
C. mac-address-table static aabb.cc00.1234 vlan 4 interface fa0/1
D. switchport port-security mac-address aabb.cc00.1234 vlan 4
Correct Answer: A
QUESTION 2
An engineer is updating the configuration on a switch. To meet updated security standards, Telnet must be replaced with encrypted connections, and the modulus
size must be increased to 2048 bits. Which two commands must the engineer configure on the switch? (Choose two.)
A. crypto key generate rsa modulus 2048
B. transport input all
C. crypto key generate rsa general-keys modulus 1024
D. transport input ssh
E. crypto key generate rsa usage-keys
Correct Answer: AD
QUESTION 3
What is an advantage of using SDN versus traditional networking when it comes to security?
A. Devices communicate with each other to establish a security policy.
B. It creates a unified control point making security policies consistent across all devices.
C. Security is managed near the perimeter of the network with firewalls, VPNs, and IPS.
D. It exposes an API to configure locally per device for security policies.
Correct Answer: B
QUESTION 4
A Cisco engineer is configuring a factory-default router with these three passwords:
1. The user EXEC password for console access is p4ssw0rd1.
2. The user EXEC password for Telnet access is s3cr3t2.
3. The password for privileged EXEC mode is priv4t3p4ss.
Which command sequence must the engineer configure?
A. enable secret privilege 15 priv4t3p4ss
!
line con0
password p4ssword1
login
!
line vty 0 15
password s3cr3t2
login
B. enable secret priv4t3p4ss
!
line con0
password p4ssword1
login
!
line vty 0 15
password s3cr3t2
login
C. enable secret priv4t3p4ss
!
line con0
password p4ssword1
!
line vty0 15
password s3cr3t2
D. enable secret priv4t3p4ss
!
line con 0
password login p4ssw0rd1
!
line vty 0 15
password login s3cr3t2
login
Correct Answer: B
QUESTION 5
If Port-channelt is the uplink interface of the access-layer switch toward the distribution-layer switch, which two configurations must be configured on the access-
layer switch to provide protection from an ARP spoofing attack?(Choose two.)
A. ip dhcp snooping
interface Port-channel1
switchport port-security maximum 1
switchport port-security
B. ip dhcp snooping vlan 1-4094
ip dhcp snooping
interface Port-channel1
ip dhcp snooping trust
C. ip arp inspection vlan 1-4094
interface Port-channel1
ip arp inspection trust
D. ip dhcp snooping vlan 1-4094
interface Port-channel1
switchport protected
switchport port-security maximum 1
E. ip arp inspection trust
interface Port-channel1
switchport port-security maximum 4094
switchport port-security
ip verify source mac-check
Correct Answer: BC
QUESTION 6
Which characteristic differentiates the concept of authentication from authorization and accounting?
A. identity verification
B. service limitations
C. consumption-based billing
D. user-activity logging
Correct Answer: A
QUESTION 7
What is the function of a northbound API in a network architecture that separates the control and application layers?
A. It upgrades software and restores files
B. It relies on global provisioning and configuration.
C. It provides a path between an SDN controller and network applications.
D. It supports distributed processing for configuration.
Correct Answer: C
QUESTION 8
Which file transfer protocol omits a username or password requirement and acknowledges all data sent?
A. SCP
B. FTP
C. TFTP
D. SFTP
Correct Answer: C
QUESTION 9
What is the purpose of a CNAME record?
A. to associate an alias to a canonical domain name
B. to identify the authoritative name server for a domain
C. to direct email to a mail server
D. to map a domain name to an IP address
Correct Answer: A
QUESTION 10
Which SNMP message type is reliable and precedes an acknowledgment response from the SNMP manager?
A. Traps
B. Set
C. Inform
D. Get
Correct Answer: C
QUESTION 11
How do AAA operations compare regarding user identification, user services, and access control?
A. Accounting tracks user services, and authentication provides access control.
B. Authorization provides access control, and authentication tracks user services.
C. Authorization identifies users, and authentication provides access control.
D. Authentication identifies users, and accounting tracks user services.
Correct Answer: D
QUESTION 12
What is the primary purpose of a console port on a Cisco WLC?
A. out-of-band management via an IP transport
B. in-band management via an IP transport
C. out-of-band management via an asynchronous transport
D. in-band management via an asynchronous transport
Correct Answer: C
QUESTION 13
What are two benefits of controller-based networking? (Choose two.)
A. inflates software costs
B. allows for fewer network failures
C. increases network bandwidth usage
D. reduces network configuration complexity
E. provides centralization of key IT functions
Correct Answer: DE
QUESTION 14
What is the function of the controller in a software-defined network?
A. making routing decisions
B. fragmenting and reassembling packets
C. multicast replication at the hardware level
D. forwarding packets
Correct Answer: A
QUESTION 15
What is the function of a DNS zone transfer?
A. Copy DNS database files from a primary to secondary server.
B. Transfer domain registration from one registrar to another.
C. Modify DNS resource records for load balancing.
D. Redirect traffic from one domain to another.
Correct Answer: A
QUESTION 16
An engineer is configuring remote access to a router from IP subnet 10.139.58.0/28. The domain name, crypto keys, and SSH have been configured. Which
configuration enables the traffic on the destination router?
A. interface FastEthernet0/0
ip address 10.122.49.1 255.255.255.240
access-group 120 in
ip access-list extended 120
permit tcp 10.139.58.0 255.255.255.248 any eq 22
B. interface FastEthernet0/0
ip address 10.122.49.1 255.255.255.248
ip access-group 10 in
ip access-list standard 10
permit udp 10.139.58.0 0.0.0.7 host 10.122.49.1 eq 22
C. interface FastEthernet0/0
ip address 10.122.49.1 255.255.255.252
ip access-group 105 in
ip access-list standard 105
permit tcp 10.139.58.0 0.0.0.7 eq 22 host 10.122.49.1
D. interface FastEthernet0/0
ip address 10.122.49.1 255.255.255.252
ip access-group 110 in
ip access-list extended 110
permit tcp 10.139.58.0 0.0.0.15 host 10.122.49.1 eq 22
Correct Answer: D
QUESTION 17
A network engineer starts to implement a new wireless LAN by configuring the authentication server and creating the dynamic interface. What must be performed
next to complete the basic configuration?
A. Enable Telnet and RADIUS access on the management interface.
B. Create the new WLAN and bind the dynamic interface to it.
C. Install the management interface and add the management IP
D. Configure high availability and redundancy for the access points.
Correct Answer: B
QUESTION 18
What is the primary difference between AAA authentication and authorization?
A. Authentication identifies and verifies a user who is attempting to access a system, and authorization controls the tasks the user can perform.
B. Authentication verifies a username and password, and authorization handles the communication between the authentication agent and the user database.
C. Authentication controls the system processes a user can access, and authorization logs the activities the user initiates.
D. Authentication identifies a user who is attempting to access a system, and authorization validates the user’s password.
Correct Answer: A
QUESTION 19
Which two values or settings must be entered when configuring a new WLAN in the Cisco Wireless LAN Controller GUl? (Choose two.)
A. IP address of one or more access points
B. SSID
C. profile name
D. management interface settings
E. QoS settings
Correct Answer: BC
QUESTION 20
What does traffic shaping do?
A. It modifies the QoS attributes of a packet
B. It organizes traffic into classes.
C. It queues excess traffic.
D. It sets QoS attributes within a packet.
Correct Answer: C