CCNA2 Chapter 8 (true 100%)

1. Which AAA service reduces IT operating costs by providing detailed reporting and monitoring of network user behavior, and also by keeping a record of every access connection and device configuration change across the network?

authentication
accreditation
accounting
authorization


2. Which three items are normally included when a log message is generated by a syslog client and forwarded to a syslog server? (Choose three.)

date and time of message
ID of sending device
length of message
message ID
checksum field
community ID


3. What is the advantage of using WPA to secure a wireless network?

It uses a 128-bit pre-shared hexadecimal key to prevent unauthorized wireless access.
It uses an advanced encryption key that is never transmitted between host and access point.
It is supported on older wireless hardware, thus providing maximum compatibility with enterprise equipment.
It requires the MAC address of a network device that is requesting wireless access to be on a list of approved MAC addresses.


4. A company wants to configure a firewall to monitor all channels of communication and allow only traffic that is part of a known connection. Which firewall configuration should be deployed?

packet filtering
proxy
stateful packet inspection
stateless packet inspection


5. A server log includes this entry: User student accessed host server ABC using Telnet yesterday for 10 minutes. What type of log entry is this?

authentication
authorization
accounting
accessing


6. What two measures help to verify that server backups have been reliably completed? (Choose two.)

reviewing backup logs
performing trial backups
performing full backups only
replacing tape backup with hard disk-based backup
using an autoloader when backups require more than one tape


7. Which means of communication does an SNMP network agent use to provide a network management station with important but unsolicited information?

query
broadcast
ICMP ping
trap
poll


8. Which three protocols are used for in-band management? (Choose three.)

FTP
HTTP
SNMP
Telnet
TFTP
DHCP


9. A hacker has gained access to sensitive network files. In analyzing the attack, it is found that the hacker gained access over a wireless segment of the network. It is further discovered that the only security measure in place on the wireless network is MAC Address Filtering. How is it likely that the hacker gained access to the network?

The hacker used a software tool to crack the shared hexadecimal wireless key.
The hacker obtained the MAC address of a permitted host, and cloned it on his wireless laptop NIC.
The attacker mounted a denial of service attack to overwhelm the firewall before penetrating the wireless LAN.
The hacker gained wireless access to the MAC address database and added his own MAC address to the list of permitted addresses.


10. A network administrator is assigning network permissions to new groups of users and employing the principle of least privilege. Which two actions should the administrator take? (Choose two.)

Provide users with only the access to resources required to do their jobs.
Provide the minimum level of permissions required for users to do their jobs.
Remove all permissions from the users and grant permissions as they are requested.
Allow users to decide how much permission they need to accomplish their job tasks.
Provide full access to the users and gradually remove privileges over time.


11. Which three protocols describe methods that can be used to secure user data for transmission across the internet? (Choose three.)

SMTP
IPSEC
SSL
HTTPS
FTP
TFTP


12. Which benefit does SSH offer over Telnet when remotely managing a router?

encryption
TCP usage
authorization
connection using six VTY lines


13. Which of the following does SNMP use to hold information collected about the network?

network management station
network management database
management information base
database information agent


14. What are two potential problems with using tape media to back up server data? (Choose two.)

Tape is not a cost-effective means of backing up data.
Data tapes are difficult to store offsite.
Data tapes are prone to failure and must be replaced often.
Tape drives require regular cleaning to maintain reliability.
Backup logs are not available with tape backup solutions.


15. What is the term for the public network between the boundary router and the firewall?

"clean" LAN
intranet
DMZ
extranet


16. Which two characteristics of network traffic are being monitored if a network technician configures the company firewall to operate as a packet filter? (Choose two.)

applications
physical addresses
packet size
ports
protocols


17. When is the use of out-of-band network management necessary?

when a server needs to be monitored across the network
when the management interface of a device is not reachable across the network
when enhanced monitoring features are required to gain an overall view of the entire network
when it is desirable to use the information that is provided by SNMP


18. What network layer security protocol can secure any application layer protocol used for communication?

HTTPS
IMAP
FTPS
IPSEC
TLS


19. Before a technician upgrades a server, it is necessary to back up all data. Which type of backup is necessary to ensure that all data is backed up?

daily
differential
full
incremental
partial


20. What AAA component assigns varying levels of rights to users of network resources?

auditing
accounting
authorization
access control
authentication
acknowledgement

Read More

CCNA 2 - Module 8

Refer to the exhibit. What can be determined from this output?
All of the routes listed are network routes.

Refer to the exhibit. A packet destined for host 128.107.0.5/16 is processed by the JAX router. After finding the static route in the routing table that matches the destination network for this packet, what does the router do next?
performs a recursive lookup to find the exit interface used to forward the packet

Refer to the exhibit. What parent network will automatically be included in the routing table when the three subnets are configured on Router1?
172.16.0.0/16

The following entry is displayed in the routing table:
R 192.168.8.0/24 [120/2] via 192.168.4.1, 00:00:26, Serial0/0/1
What type of route is this?
a level 1 ultimate network route

Refer to the exhibit. Router1 is running IOS version 12.2. What will the network administrator need to do so that packets for unknown child routes of 172.16.0.0/24 will not be dropped?
do nothing, ip classless is on by default

Refer to the exhibit. Router B receives a packet with a destination address of 10.16.1.97. What will router B do?
use the default route

Refer to the exhibit. How many routes in this output qualify for use as ultimate routes?
7

Refer to the exhibit. With the ip classless command issued, what will router R2 do with a packet destined for host 172.16.4.234?
send packet out Serial 0/0/1

Refer to the exhibit. Which statement correctly describes this network?
There is at least one parent and one child route

Refer to the exhibit. Router1 has been issued the ip classless command. What happens to packets destined to host 172.16.3.10?
forward out interface Serial0/0/1

Refer to the exhibit. The network administrator has discovered that packets destined for servers on the 172.16.254.0 network are being dropped by Router2. What command should the administrator issue to ensure that these packets are sent out the gateway of last resort, Serial 0/0/1?
ip classless
A router has the following entries in its routing table:
S 192.168.0.0/24 [1/0] via 192.168.128.2
O 192.168.0.0/25 [110/2175] via 172.16.1.1, 00:02:15, FastEthernet0/1
D 192.168.0.0/25 [90/22455] via 172.16.2.2, 00:12:15, Serial0/0/0
R 192.168.0.0/26 [120/2] via 172.16.3.3, 00:00:15, Serial0/0/1
The router receives a packet that is destined for a host with the address 192.168.0.58. Which route would this router use to forward the packet?
the RIP route

What determines if the router implements a classless route lookup process?
Multiple routes with different masks to the same destination are in the routing table.

What occurs when no ip classless is implemented on the router?
The router will assume it has knowledge of all subnets in the network and will not search beyond child routes for a better match.

Refer to the exhibit. The graphic contains partial contents of the routing table on router E. Router E is running version 12.3 of the IOS and is configured for default routing behavior. Router E receives a packet to forward. Which route in the routing table will be searched
first and why?
172.16.0.0/25 because it is the first level 1 route

A network is converged and the routing tables are complete. When a packet needs to be forwarded, what is the first criterion used to determine the best path in the routing table?
the route with the longest address and mask match to the destination

Refer to the exhibit. What subnet mask will Router1 apply to child routes of the 172.16.0.0/24 network?
255.255.255.0

Refer to the exhibit. What protocol was used to distribute the routing information for the network 172.16.1.4?
RIPv2

A route to a destination network is learned from multiple routing protocols. What is used by a Cisco router to select the preferred route to the destination that will be installed in the routing table?
administrative distance

Read More