1.5

Question 1

81. On what switch ports should BPDU guard be enabled to enhance STP stability?
    only ports that attach to a neighboring switch
    all PortFast-enabled ports Correct
    all trunk ports that are not root ports
    only ports that are elected as designated ports

Answer 1

all PortFast-enabled ports Correct

Question 2

82.	Which feature is specific to the Security Plus upgrade license of an ASA 5505 and provides increased availability?
redundant ISP connections
routed mode
transparent mode
stateful packet inspection

Answer 2

redundant ISP connections

Question 3

83.	A company deploys a hub-and-spoke VPN topology where the security appliance is the hub and the remote VPN networks are the spokes. Which VPN method should be used in order for one spoke to communicate with another spoke through the single public interface of the security appliance?
split tunneling
MPLS
GRE
Hairpinning

Answer 3

Hairpinning

Question 4

84. What are two drawbacks in assigning user privilege levels on a Cisco router? (Choose two.)
    Privilege levels must be set to permit access control to specific device interfaces, ports, or slots.
    Assigning a command with multiple keywords allows access to all commands using those keywords.
    Only a root user can add or remove commands.
    Commands from a lower level are always executable at a higher level.
    AAA must be enabled.

Answer 4

Assigning a command with multiple keywords allows access to all commands using those keywords.
Commands from a lower level are always executable at a higher level.

Question 5

85.	Which two types of hackers are typically classified as grey hat hackers? (Choose two.)
script kiddies
vulnerability brokers
cyber criminals
state-sponsored hackers
hacktivists

Answer 5

vulnerability brokers

hacktivists

Question 6

86.	What is the default preconfigured interface for the outside network on a Cisco ASA 5505?
VLAN 2
Ethernet 0/2
Ethernet 0/1
VLAN 1

Answer 6

VLAN 2

Question 7

87.	A user successfully logs in to a corporate network via a VPN connection. Which part of the AAA process records that a certain user performed a specific operation at a particular date and time?
authentication
accounting
access
authorization

Answer 7

accounting

Question 8

88.	What determines which switch becomes the STP root bridge for a given VLAN?
the lowest bridge ID
the highest MAC address
the highest priority
the lowest IP address

Answer 8

lowest

Question 9

89. What is a function of the GRE protocol?
    to configure the set of encryption and hashing algorithms that will be used to transform the data sent through the IPsec tunnel
    to provide encryption through the IPsec tunnel
    to configure the IPsec tunnel lifetime
    to encapsulate multiple OSI Layer 3 protocol packet types inside an IP tunnel

Answer 9

to encapsulate multiple OSI Layer 3 protocol packet types inside an IP tunnel

Question 10

90. What is used to determine the root bridge when the priority of the switches are the same?
    the MAC address with the highest hexadecimal value
    the lowest ip address
    the layer 2 address with the lowest hexadecimal value
    the highest BID

Answer 10

the layer 2 address with the lowest hexadecimal value

Question 11

91. What is algorithm-type to protect the data in transit?

Answer 11

Hashing algorithm

Question 12

92.	What type of ACL is designed for use in the configuration of an ASA to support filtering for clientless SSL VPN’s?
Webtype
Standard
Ethertype
Extended

Answer 12

Webtype

Question 13

93. The following authentication configuration is applied to a router.
    aaa authentication login default tacacs+ local enable none
    Several days later the TACACS+ server goes off-line. Which method will be used to authenticate users?
    none
    manually configured vty line password
    local username/password database
    default

Answer 13

none

Question 14

94. A security technician is evaluating a new operations security proposal designed to limit access to all servers. What is an advantage of using network security testing to evaluate the new proposal?
    Network security testing proactively evaluates the effectiveness of the proposal before any real threat occurs.
    Network security testing is most effective when deploying new security proposals.
    Network security testing is specifically designed to evaluate administrative tasks involving server and workstation access.
    Network security testing is simple because it requires just one test to evaluate the new proposal.

Answer 14

Network security testing proactively evaluates the effectiveness of the proposal before any real threat occurs.