<< Prev Question Next Question >>

Question 27/172

When AAA login autnentication is configured on Cisco routers, which two authentication methods should be used as the final method to ensure that the administrator can still log in to the router in case the external AAA server fails? (Choose two.)

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (172q)
Question 1: Which two protocols are used in a server-based AAA deploymen...
Question 2: (Exhibit) Select and Place: (Exhibit)...
Question 3: Refer to the exihibit: (Exhibit) Which statement about this ...
Question 4: Which IPS technique commonly is used to improve accuracy and...
Question 5: When port securits, is enabled on a Cisco Catalyst switch, w...
Question 6: Which four methods are used by hackers? (Choose four.)...
Question 7: Which type of Cisco ASA access list entry can be configured ...
Question 8: (Exhibit) Select and Place: (Exhibit)...
Question 9: On which protocol number does the authentication header oper...
Question 10: (Exhibit) Select and Place: (Exhibit)...
Question 11: Refer to the exhibit: (Exhibit) Which statement about this d...
Question 12: With Cisco lOS zone-based policy firewall by default, which ...
Question 13: What Cisco Security Agent interceptor is in change of interc...
Question 14: Which statement is a benefit of using Cisco lOS IPS?...
Question 15: (Exhibit) Select and Place: (Exhibit)...
Question 16: Which two options are characteristics of the Cisco Configura...
Question 17: You are troubleshooting a Cisco Anyconnect VPN on a firewall...
Question 18: When using a stateful firewall, which information is stored ...
Question 19: Refer to the exhibit: (Exhibit) Which statement about this p...
Question 20: If you are implementing VLAN trunking, which additional conf...
Question 21: Which location is recommended for extended or extended named...
Question 22: (Exhibit) Select and Place: (Exhibit)...
Question 23: Which two countermeasures can mitigate MAC spoofing attacks?...
Question 24: Which protocol secures router management session traffic?...
Question 25: (Exhibit) Which policy is assigned to Zone Pair sdm-zip-OUT-...
Question 26: Which option is the resulting action in a zone-based policy ...
Question 27: When AAA login autnentication is configured on Cisco routers...
Question 28: Which statement describes how the sender of the message is v...
Question 29: You are the security administrator for a large enterprise ne...
Question 30: What are two primary attack methods of VLAN hopping? (Choose...
Question 31: Which access list permits HTTP traffic sourced from host 10....
Question 32: Which tjpe of Cisco lOS access control list is identified by...
Question 33: (Exhibit) Select and Place: (Exhibit)...
Question 34: Which item is the great majority of software vulnerabilities...
Question 35: Which technology provides an automated digital certificate m...
Question 36: Which two statements about SSL-based VPNs are true? (Choose ...
Question 37: Which type of network masking is used when Cisco lOS access ...
Question 38: Refer to the exhibit: (Exhibit) Using a stateful packet fire...
Question 39: Which type of firewall technology is considered the versatil...
Question 40: Which two features are supported by Cisco IronPort Security ...
Question 41: A Cisco ASA appliance has three interfaces configured. The f...
Question 42: Which two services are provided by IPsec? (Choose two.)...
Question 43: What is the purpose of a trunk port?...
Question 44: Which option describes the purpose of Diffie-Hellman?...
Question 45: Which option is a characteristic of the RADIUS protocol?...
Question 46: Which three statements about the IPsec ESP modes of operatio...
Question 47: How are Cisco lOS access control lists processed?...
Question 48: Which single Cisco lOS ACL entry permits lP addresses from 1...
Question 49: You have been tasked by your manager to implement syslog in ...
Question 50: (Exhibit)
Question 51: (Exhibit) Select and Place: (Exhibit)...
Question 52: Which characteristic is the foundation of Cisco Self-Defendi...
Question 53: Which three options are common examples of AAA implementatio...
Question 54: Which statement about control plane policing is true?...
Question 55: When STP mitigation features are configured, where should th...
Question 56: Which statement about asymmetric encryption algorithms is tr...
Question 57: Which three statements about TACAS+ are true? (Choose three)...
Question 58: When a network transitions from IPV4 to IPV6, how many bits ...
Question 59: You use Cisco Configuration Professional to enable Cisco lOS...
Question 60: security control is defense in depth?...
Question 61: Which syslog level is associated with LOG_WARNING?...
Question 62: Which type of Layer 2 attack causes a switch to flood all in...
Question 63: You suspect that an attacker in your network has configured ...
Question 64: (Exhibit) Select and Place: (Exhibit)...
Question 65: (Exhibit) Select and Place: (Exhibit)...
Question 66: You want to use the Cisco Configuration Professional site-to...
Question 67: When configuring role-based CLI on a Cisco router, which ste...
Question 68: Which Cisco IPS product offers an inline, deep-packet inspec...
Question 69: What is the best way to prevent a VLAN hopping attack?...
Question 70: (Exhibit) Select and Place: (Exhibit)...
Question 71: Which statement is true when you have generated RSA keys on ...
Question 72: Which step is important to take when implementing secure net...
Question 73: Which statement about an access control list that is applied...
1 commentQuestion 74: Which statement best represents the characteristics of a VLA...
Question 75: Which two considerations about secure network management are...
Question 76: Under which higher-level policy is a VPN security policy cat...
Question 77: (Exhibit) Select and Place: (Exhibit)...
1 commentQuestion 78: Which two statements about IPV6 access list are true? (Choos...
Question 79: Which two IPSEC protocols are used to protect data in motion...
Question 80: Which command enables Cisco lOS image resilience?...
Question 81: Refer to the exhibit. You are a network manager for your org...
Question 82: When configuring SSL VPN on the Cisco ASA appliance, which c...
Question 83: Refer to exhibit: (Exhibit) Which switch is designated as th...
Question 84: Which statement about PVLAN Edge is true?...
Question 85: (Exhibit) Select and Place: (Exhibit)...
Question 86: In a brute-force attack, what percentage of the keyspace mus...
Question 87: Which AAA feature can automate record keeping within a netwo...
Question 88: Which lype of intrusion prevention technology is the primary...
Question 89: Which statement correctly describes the function of a privat...
Question 90: Which option is a characteristic of a stateful firewall?...
Question 91: When Cisco lOS zone-based policy firewall is configured, whi...
Question 92: (Exhibit) Which four properties are included in the inspecti...
Question 93: Refer to the exhibit: (Exhibit) Current configuration : 156 ...
Question 94: What does the MD5 algorithm do?...
Question 95: Which two countermeasures can mitigate STP root bridge attac...
Question 96: Which two protocols enable Cisco Configuration Professional ...
Question 97: What are three of the security conditions that Cisco Configu...
Question 98: What is the key difference between host-based and network-ba...
Question 99: Which three modes of access can be delivered by SSL VPN? (Ch...
Question 100: Which statement describes a result of securing the Cisco lOS...
Question 101: Which two options represent a threat to the physical install...
Question 102: Which type of attack can be prevented by setting the native ...
Question 103: In which type of Layer 2 attack does an attacker broadcast B...
Question 104: (Exhibit) What NAT address will be assigned by ACL 1?...
Question 105: Which option is a feature of Cisco ScanSafe technology?...
Question 106: Which description of the Diffie-Heliman protocol is true?...
Question 107: Which two types of access lists can be used for sequencing? ...
Question 108: On Cisco ISR routers, for what purpose is the realm-cisco.pu...
Question 109: Which router management feature provides for the ability to ...
Question 110: On which protocol number does Encapsulating Security Payload...
Question 111: What does level 5 in this enable secret global configuration...
Question 112: Which command verifies phase 2 of an IPSEC VPN on a Cisco ro...
Question 113: Which two options are symmetric-key algorithms that are reco...
Question 114: Which option is a key difference between Cisco lOS interface...
Question 115: Which four tasks are required when you configure Cisco lOS I...
Question 116: Which statement is true about configuring access control lis...
Question 117: What will be disabled as a result of the no service password...
Question 118: Which command enables subnet 192.168.8.4/30 to communicate w...
Question 119: Which two characteristics of the TACACS+ protocol are true? ...
Question 120: Which two options are two of the built-in features of lPv6? ...
Question 121: Which three statements about the Cisco ASA appliance are tru...
Question 122: Which security measure must you take for native VLANs on a t...
Question 123: What does the secure boot-config global configuration accomp...
Question 124: Which network security framework is used to set up access co...
Question 125: Which statement describes a best practice when configuring t...
Question 126: The host A layer 2 port is configured in VLAN5 on switch1, a...
Question 127: Which three items are Cisco best-practice recommendations fo...
Question 128: You have configured a standard access control list on a rout...
Question 129: Which statement about disabled signatures when using Cisco l...
Question 130: Which statement about Cisco IOS IPS on Cisco IOS Release 12....
Question 131: Which characteristic is a potential security weakness of a t...
Question 132: Which three statements about applying access control lists t...
Question 133: Which Cisco management tool provides the ability to centrall...
Question 134: Which statement describes how VPN traffic is encrypted to pr...
Question 135: (Exhibit) Which two changes must you make to given IOS site-...
Question 136: Which option is the correct representation of the IPv6 addre...
Question 137: Which kind of table do most firewalls use today to keep trac...
Question 138: Which two options are advantages of an application layer fir...
Question 139: Which type of NAT would you configure if a host on the exter...
Question 140: Which three applications comprise Cisco Security Manager? (C...
Question 141: Which priorit is most important when you plan out access con...
Question 142: Refer to CISCO IOS Zone-Based Policy Firewall, where will th...
Question 143: For what purpose is the Cisco ASA appliance web launch SSL V...
Question 144: (Exhibit) Which Class Map is used by the INBOUND Rule?...
Question 145: Which statement is true about vishing?...
Question 146: Which type of NAT is used where you translate multiple inter...
Question 147: Refer to the exhibit: (Exhibit) What does the option secret ...
Question 148: Which one of the following items may be added to a password ...
Question 149: (Exhibit) Select and Place: (Exhibit)...
Question 150: During role-based CLI configuration, what must be enabled be...
Question 151: In which two modes can Cisco Configuration Professional Secu...
Question 152: (Exhibit) What is included in the Network Object Group INSID...
Question 153: Which command will block IP traffic to the destination 172.1...
Question 154: Which two characteristics represent a blended threat? (Choos...
Question 155: Which option can be used to authenticate the IPsec peers dur...
Question 156: Which Cisco IOS command will verify authentication between a...
Question 157: (Exhibit) Select and Place: (Exhibit)...
Question 158: Which option represents a step that should be taken when a s...
Question 159: Which AAA accounting command is used to enable logging of th...
Question 160: Information about a managed device. Is resources and activit...
Question 161: Refer to the exhibit: (Exhibit) Which traffic is permitted b...
Question 162: Which IPsec transform set provides the strongest protection?...
Question 163: Refer to the exhibit: (Exhibit) Which three statements about...
Question 164: Under which option do you create a AAA authentication policy...
Question 165: Which four types of VPN are supported using Cisco ISRs and C...
Question 166: (Exhibit) Select and Place: (Exhibit)...
Question 167: Which three statements about RADIUS are true? (Choose three)...
Question 168: (Exhibit) Select and Place: (Exhibit)...
Question 169: Which two functions are required for IPsec operation? (Choos...
Question 170: Which two pieces of information should you acquire before yo...
Question 171: Which Cisco IOS command is used to verify that either the Ci...
Question 172: Which type of management reporting is defined by separating ...