Question

• Tracert shows each hop, while ping shows a destination reply only.
• Tracert uses IP addresses; ping does not.
• Both ping and tracert can show results in a graphical display.
• Ping shows whether the transmission is successful; tracert does not.

Question

• DHCP
• Telnet
• DNS
• Traceroute

Question

• Connectivity to the remote device was successful.
• A router along the path did not have a route to the destination.
• A ping packet is being blocked by a security device along the path.
• The connection timed out while waiting for a reply from the remote device.

Question

• FTP
• HTTP
• SSH
• Telnet

Question

• show arp
• show interfaces
• show ip route
• show protocols

Question

• The network administrator suspects a virus because the ping command did not work.
• The network administrator wants to verify Layer 2 connectivity.
• The network administrator wants to verify the IP address configured on router R2.
• The network administrator wants to determine if connectivity can be established from a non-directly connected network.

Question

• to identify the source and destination of local network traffic
• to capture the Internet connection bandwidth requirement
• to document and analyze network traffic requirements on each network segment
• to establish a baseline for security analysis after the network is upgraded

Question

• exec-timeout 30
• service password-encryption
• banner motd $Max failed logins = 5$
• login block-for 60 attempts 5 within 60

Question

1. application filtering → prevents or allows access based on the port numbers used in the request
2. stateful packet inspection → prevents or allows access based on whether the traffic is in response to requests from internal hosts
3. URL filtering → prevents or allows access based on web addresses or keywords
4. packet filtering → prevents or allows access based on the IP or MAC addresses of the source and destination

Question

1. configuration weakness → When implementing an access list on a router, a network engineer did not filter a type of malicous traffic.
2. technological weakness → A nework engineer is examining the operating system of a network device for vulnerabilities.
3. security policy weakness → The network administrator did not fully consider the implications of unauthorized users accessing the network.

Question

• fast Ethernet interfaces
• onsole ports
• serial interfaces
• vty ports
• loopback interfaces

Question

• configuring a router with a complete MAC address database to ensure that all frames can be forwarded to the correct destination
• configuring a switch with proper security to ensure that all traffic forwarded through an interface is filtered
• designing a network to use multiple virtual devices to ensure that all traffic uses the best path through the internetwork
• designing a network to use multiple paths between switches to ensure there is no single point of failure

Question

• to require users to prove who they are
• to determine which resources a user can access
• to keep track of the actions of a user
• to provide challenge and response questions

Question

• Set the user privilege levels.
• Generate the asymmetric RSA keys.
• Configure the correct IP domain name.
• Configure role-based CLI access.
• Create a valid local username and password database.
• Manually enable SSH after the RSA keys are generated.

Question

• malware that was written to look like a video game
• malware that requires manual user intervention to spread between systems
• malware that attaches itself to a legitimate program and spreads to other programs when launched
• malware that can automatically spread from one system to another by exploiting a vulnerability in the target

Question

• Issue the ping command from within interface configuration mode.
• Issue the ping command without specifying a destination IP address.
• Issue the ping command without extended commands.
• Issue the ping command after shutting down un-needed interfaces.

Question

• a change in the bandwidth according to the show interfaces output
• a next-hop timeout from a traceroute
• an increase in host-to-host ping response times
• a change in the amount of RAM according to the show version output

Question

• confidentiality with IPsec
• stronger password requirement
• random one-time port connection
• login information and data encryption

Question

1. data loss → installing virus code to destroy surveillance recordings for certain days
2. identity theft → pretending to be someone else by using stolen personal information to apply for a credit card
3. disruption of service → preventing users from accessing a website by sending a large number of link requests in a short period
4. information theft → obtaining trade secret documents illegally

Question

• Change system passwords every 30 days.
• Ensure that all systems have the most current virus definitions.
• Ensure that AAA is configured in the network.
• Download security updates from the operating system vendor and patch all vulnerable systems.

Question

• Voice
• Video
• Instant messaging
• FTP
• SNMP

Question

• Stateful packet inspection
• URL filtering
• Application filtering
• Packet filtering

Question

• '!' indicates that the ping was unsuccessful and that the device may have issues finding a DNS server.
• 'U' may indicate that a router along the path did not contain a route to the destination address and that the ping was unsuccessful.
• '.' indicates that the ping was successful but the response time was longer than normal.
• A combination of '.' and '!' indicates that a router along the path did not have a route to the destination address and responded with an ICMP unreachable message.​

Question

• The NIC in the PC is bad.
• The TCP/IP protocol is not enabled.
• The router that is attached to the same network as the workstation is down.
• Nothing can be determined for sure at this point.

Question

• debug all
• logging synchronous
• show running-config​
• terminal monitor

Question

• It forces the trace to use IPv6.
• It limits the trace to only 6 hops.
• It sets a 6 milliseconds timeout for each replay.
• It sends 6 probes within each TTL time period.

Question

• terminal monitor
• logging console
• logging buffered
• logging synchronous

Question

• show version
• show ip route
• show interfaces
• show cdp neighbors detail

Question

• Viruses self-replicate but worms do not.
• Worms self-replicate but viruses do not.
• Worms require a host file but viruses do not.
• Viruses hide in legitimate programs but worms do not.

Question

• attack based
• risk based
• structured
• layered

Question

• SSH is easier to use.
• SSH operates faster than Telnet.
• SSH provides secure communications to access hosts.
• SSH supports authentication for a connection request.

Question

• netstat
• tracert
• nslookup
• ipconfig

Question

• to determine the active TCP connections on a PC
• to check information about a DNS name in the DNS server
• to identify where a packet was lost or delayed on a network
• to display the IP address, default gateway, and DNS server address for a PC

Question

• Verify full system functionality.
• Test the theory to determine cause.
• Establish a theory of probable causes.
• Establish a plan of action to resolve the issue.

Question

• The PC cannot contact a DHCP server.
• The DNS server address is misconfigured.
• The default gateway address is not configured.
• The PC is configured to obtain an IP address automatically.
• The enterprise network is misconfigured for dynamic routing.

Question

• the routing protocol version that is enabled
• the value of the configuration register
• the operational status of serial interfaces
• the administrative distance used to reach networks

Question

• detecting and blocking of attacks in real time
• connecting global threat information to Cisco network security devices
• authenticating and validating traffic
• filtering of nefarious websites

Question

• denial-of-service
• man-in-the-middle attack
• extraction of security parameters
• username enumeration

Question

• Reconnaissance
• DoS
• Dictionary
• Man-in-the-middle

Question

• service password-encryption
• transport input ssh
• enable secret class
• ip domain-name cisco.com

Question

• It is strong because it uses a passphrase.
• It is weak because it is often the default password on new devices.
• It is weak since it uses easily found personal information.
• It is weak since it is a word that is easily found in the dictionary.

Question

• It is strong because it uses a minimum of 10 numbers, letters and special characters.
• It is weak because it is often the default password on new devices.
• It is weak since it uses easily found personal information.
• It is weak since it is a word that is easily found in the dictionary.

Question

• It is strong because it contains 10 numbers and special characters.
• It is weak because it is often the default password on new devices.
• It is weak since it uses easily found personal information.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.

Question

• It is strong because it uses a minimum of 10 numbers, letters and special characters.
• It is weak since it is a word that is easily found in the dictionary.
• It is strong because it uses a passphrase.
• It is strong because it contains 10 numbers and special characters.

Question

• It is weak because it uses a series of numbers or letters.
• It is strong because it uses a passphrase.
• It is weak since it is a word that is easily found in the dictionary.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.

Question

• It is weak because it is often the default password on new devices.
• It is strong because it uses a passphrase.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.
• It is strong because it contains 10 numbers and special characters.

Question

• It is weak because it uses easily found personal information.
• It is strong because it uses a passphrase.
• It is weak since it is a word that is easily found in the dictionary.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.

Question

• It is weak because it is a commonly used password.
• It is weak since it is a word that is easily found in the dictionary.
• It is strong because it uses a passphrase.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.

Question

• It is weak since it uses easily found personal information.
• It is strong because it uses a passphrase.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.
• It is strong because it contains 10 numbers and special characters.

Question

• It is weak because it uses easily found personal information.
• It is strong because it uses a passphrase.
• It is weak since it is a word that is easily found in the dictionary.
• It is strong because it uses a minimum of 10 numbers, letters and special characters.

Question

• show ip interface brief
• nslookup
• ipconfig getifaddr en0
• show ip route

Question

• show interfaces
• ipconfig getifaddr en0
• copy running-config startup-config
• show ip nat translations

Question

• ipconfig
• copy running-config startup-config
• show interfaces
• show ip nat translations

Question

• copy running-config startup-config
• show interfaces
• show ip nat translations
• show ip route

Question

• ipconfig getifaddr en0
• copy running-config startup-config
• show interfaces
• show ip nat translations

Question

• show ipv6 interface
• show interfaces
• show ip nat translations
• show ip route

Question

• ipconfig
• copy running-config startup-config
• show interfaces
• show ip nat translations

Question

• show running-config
• show interfaces
• copy running-config startup-config
• show ip nat translations

Question

• nslookup
• show ipv6 route
• show ipv6 interface
• copy startup-config running-config

Question

• show running-config
• show ipv6 route
• show ipv6 interface
• copy startup-config running-config

Question

• traceroute
• show cdp neighbors
• telnet
• an extended ping

Question

• Connectivity between H1 and H3 is fine.
• H3 is not connected properly to the network.
• Something is causing interference between H1 and R1.
• Performance between the networks is within expected parameters.
• Something is causing a time delay between the networks.