CCNP Chapter 8 Exam Questions
with All Correct Answers
What does the accept-lifetime 04:00:00 Jan 10 2015 infinite command do? - Answer-
specifies that a key is acceptable for use on received packets from January 10, 2015
onward
Which VRF-lite statement is true? - Answer-VRF-lite is the deployment of VRF without
MPLS.
Which of the following is an IP-based network solution that takes advantage of existing
VRF-lite technology to simplify Layer 3 network virtualization, improve support for
shared services, and enhance management and troubleshooting. - Answer-Cisco Easy
Virtual Network (EVN)
Using SSH, implementing logging, and securing SNMP are all tasks related to securing
which router operational plane? - Answer-Management plane
Using routing protocol authentication is a task related to securing which router operation
plane? - Answer-Control plane
Refer to the exhibit. Which AAA authentication protocol operation is being illustrated in
the exhibit? - Answer-RADIUS
Which routing protocol enables authentication by default? - Answer-No routing protocol
enables authentication by default.
Which statement about plain-text authentication is true? - Answer-Plain-text
authentication is considered to be insecure and should not be used.
Which two authentication methods does EIGRP support? - Answer-MD5
SHA
The output of the show ip ssh command displays SSH Enabled - version 2. Based on
this output, which statement is true? - Answer-The device was configured with the ip
ssh version 2 command.
Which statement about SNMP is true? - Answer-SNMPv3 can provide authenticity,
integrity, and confidentiality.
with All Correct Answers
What does the accept-lifetime 04:00:00 Jan 10 2015 infinite command do? - Answer-
specifies that a key is acceptable for use on received packets from January 10, 2015
onward
Which VRF-lite statement is true? - Answer-VRF-lite is the deployment of VRF without
MPLS.
Which of the following is an IP-based network solution that takes advantage of existing
VRF-lite technology to simplify Layer 3 network virtualization, improve support for
shared services, and enhance management and troubleshooting. - Answer-Cisco Easy
Virtual Network (EVN)
Using SSH, implementing logging, and securing SNMP are all tasks related to securing
which router operational plane? - Answer-Management plane
Using routing protocol authentication is a task related to securing which router operation
plane? - Answer-Control plane
Refer to the exhibit. Which AAA authentication protocol operation is being illustrated in
the exhibit? - Answer-RADIUS
Which routing protocol enables authentication by default? - Answer-No routing protocol
enables authentication by default.
Which statement about plain-text authentication is true? - Answer-Plain-text
authentication is considered to be insecure and should not be used.
Which two authentication methods does EIGRP support? - Answer-MD5
SHA
The output of the show ip ssh command displays SSH Enabled - version 2. Based on
this output, which statement is true? - Answer-The device was configured with the ip
ssh version 2 command.
Which statement about SNMP is true? - Answer-SNMPv3 can provide authenticity,
integrity, and confidentiality.
