Best CCNA Training and CCNA Certification and more Cisco exams log in to Certkingdom.com
QUESTION 1
Which access list will permit HTTP traffic sourced from host 10.1.129.100 port 3030 destined to
host 192.168.1.10?
A. access-list 101permit tcp any eq 3030
B. access-list 101permit tcp 10.1.128.0 0.0.1.255 eq 3030 192.168.1.0 0.0.0.15 eq www
C. access-list 101permit tcp 10.1.129.0 0.0.0.255 eq www 192.168.1.10 0.0.0.0 eq www
D. access-list 101 permittcp host 192.168.1.10 eq 80 10.1.0.0 0.0.255.255 eq 3030
E. access-list 101permit tcp 192.168.1.10 0.0.0.0 eq 80 10.1.0.0 0.0.255.255
F. access-list 101 permitip host 10.1.129.100 eq 3030 host 192.168.1.100 eq 80
Answer: B
QUESTION 2
DRAG DROP
Drag three proper statements about the IPsec protocol on the above to the list on the below.
Answer:
QUESTION 3
In a brute-force attack, what percentage of the keyspace must an attacker generally search
through until he or she finds the key that decrypts the data?
A. Roughly 50 percent
B. Roughly 66 percent
C. Roughly 75 percent
D. Roughly 10 percent
Answer: A
QUESTION 4
The information of Cisco Router and Security Device Manager(SDM) is shown below:
Within the “sdm-permit” policy map, what is the action assigned to the traffic class “class-default”?
A. inspect
B. drop
C. police
D. pass
Answer: B
QUESTION 5
DRAG DROP
On the basis of the description of SSL-based VPN, place the correct descriptions in the proper
locations.
Answer:
QUESTION 6
Refer to the exhibit and partial configuration. Which statement is true?
A. All traffic destined for network 172.16.150.0 will be denied due to the implicit deny all.
B. All traffic from network 10.0.0.0 will be permitted.
C. Access-list 101 will prevent address spoofing from interface E0.
D. This is amisconfigured ACL resulting in traffic not being allowed into the router in interface S0.
E. This ACL will prevent any host on the Internet from spoofing the inside network address as the
source address for packets coming into the router from the Internet.
Answer: C
QUESTION 7
Which of these can be used to authenticate the IPsec peers during IKE Phase 1?
A. Diffie-Hellman Nonce
B. pre-shared key
C. XAUTH
D. integrity check value
E. ACS
F. AH
Answer: B
QUESTION 8
Which description about asymmetric encryption algorithms is correct?
A. They use the same key for encryption and decryption of data.
B. They use different keys for decryption but the same key for encryption of data.
C. They use different keys for encryption and decryption of data.
D. They use the same key for decryption but different keys for encryption of data.
Answer: C
QUESTION 9
For the following items, which management topology keeps management traffic isolated from
production traffic?
A. OTP
B. OOB
C. SAFE
D. MARS
Answer: B
QUESTION 10
You work as a network engineer, do you know an IPsec tunnel is negotiated within the protection
of which type of tunnel?
A. L2F tunnel
B. L2TP tunnel
C. GRE tunnel
D. ISAKMP tunnel
Answer: D
Best CCNA Training and CCNA Certification and more Cisco exams log in to Certkingdom.com