Ccna Security Chapter 2

Front 1

Refer to the exhibit. Which statement about the JR-Admin account is true?

Back 1

JR-Admin can issue ping and reload commands.

Front 2

Refer to the exhibit. What two pieces of information can be gathered from the generated message? (Choose two.)

Back 2

This message is a level five notification message.
This message indicates that service timestamps have been globally enabled.

Front 3

Which three options can be configured by Cisco AutoSecure? (Choose three.)

Back 3

enable secret password
security banner

CBAC

Front 4

What access does role based CLI access for security restrict

Back 4

Role-based CLI access enhances the security of the device by defining the set of CLI commands accessible by a specific user. Additionally, administrators can control user access to specific ports, logical interfaces, and slots on a router. This prevents a user from accidentally or purposely changing a configuration or collecting information to which they should not have access.

Front 5

What access does CLI availability restrict?

Back 5

role-based CLI access prevents unintentional execution of CLI commands by unauthorized personnel, which could result in undesirable results, and minimizes downtime.

Front 6

What view can configure a root based view

Back 6

Only root view

Front 7

What view is a set of commands bundled into a single view

Back 7

CLI view

Front 8

What is the purpose of a superview

Back 8

It allows an administrator to assign more then one CLI view at once.

Front 9

What features does auto secure enable

Back 9

Secure BOOTP, CDP, FTP, TFTP, PAD, UDP, and TCP small servers, MOP, ICMP (redirects, mask-replies), IP source routing, Finger, password encryption, TCP keepalives, gratuitous ARP, proxy ARP, and directed broadcast

Legal notification using a banner
Secure password and login functions
Secure NTP
Secure SSH access
TCP intercept services

Front 10

Which three options can be configured by Cisco AutoSecure? (Choose three.)

Back 10

security banner
enable secret password
CBAC

Front 11

Why is the username name secret password command preferred over the username namepassword password command?

Back 11

It uses the MD5 algorithm for encrypting passwords.

Front 12

An administrator defined a local user account with a secret password on router R1 for use with SSH. Which three additional steps are required to configure R1 to accept only encrypted SSH connections? (Choose three.)

Back 12

Generate the SSH keys.
Enable inbound vty SSH sessions.
Configure the IP domain name on the router.

Front 13

If AAA is already enabled, which three CLI steps are required to configure a router with a specific view? (Choose three.)

Back 13

Associate the view with the root view.
Create a view using the parser view view-name command.
Assign commands to the view.

Front 14

What three services does CCP one step lockdown enable

Back 14

password encryption
a firewall on all outside interfaces
SSH access to the router

Front 15

Which recommended security practice prevents attackers from performing password recovery on a Cisco IOS router for the purpose of gaining access to the privileged EXEC mode?

Back 15

Locate the router in a secure locked room that is accessible only to authorized personnel.

Front 16

Which statement describes the operation of the CCP Security Audit wizard?

Back 16

A security audit feature provided through CCP. The Security Audit wizard provides a list of vulnerabilities and then allows the administrator to choose which potential security-related configuration changes to implement on a router.

the wizard is based on the Cisco IOS AutoSecure feature.

Front 17

Which three types of views are available when configuring the role-based CLI access feature? (Choose three.)

Back 17

CLI view

superview

root view

Front 18

Refer to the exhibit. Routers R1 and R2 are connected via a serial link. One router is configured as the NTP master, and the other is an NTP client. Which two pieces of information can be obtained from the partial output of the show ntp associations detailcommand on R2? (Choose two.)

Back 18

Router R1 is the master, and R2 is the client.

The IP address of R1 is 192.168.1.2.

Front 19

What are two characteristics of SNMP community strings?

Back 19

SNMP read-only community strings can be used to get information from an SNMP-enabled device.
SNMP read-write community strings can be used to set information on an SNMP-enabled device.

Front 20

Which three areas of router security must be maintained to secure an edge router at the network perimeter? (Choose three.)

Back 20

operating system security

physical security

router hardening

Front 21

By default, how many seconds of delay between virtual login attempts is invoked when the login block-for command is configured?

Back 21

one

Front 22

What is an equivalent of the enable command with SNMP

Back 22

set access

Front 23

Which command is used to verify the existence of a secure Cisco IOS image file?

Back 23

dir

Front 24

What command must be issued on a Cisco router that will serve as an authoritative NTP server?

Back 24

ntp master 1