Cisco Security Final Exam| 100 QUESTIONS| WITH COMPLETE SOLUTIONS

Which security implementation will provide control plane protection for a network device? a) encryption for remote access connections b) AAA for authenticating management access c) routing protocol authentication d) NTP for consistent timestamps on logging messages CORRECT ANSWERS: c) routing protocol authentication What is the one major difference between local AAA authentication and using the login local command when configuring device access authentication? a) Local AAA authentication provides a way to configure backup methods of authentication, but login local does not. b) The login local command requires the administrator to manually configure the usernames and passwords, but local AAA authentication does not. c) Local AAA authentication allows more than one user account to be configured, but login local does not. d) The login local command uses local usernames and passwords stored on the router, but local AAA authentication does not. CORRECT ANSWERS: a) Local AAA authentication provides a way to configure backup methods of authentication, but login local does not. Refer to the exhibit. A network administrator configures AAA authentication on R1. The administrator then tests the configuration by telneting to R1. The ACS servers are configured and running. What will happen if the authentication fails? a) The enable secret password could be used in the next login attempt. b) The authentication process stops. c) The username and password of the local user database could be used in the next login attempt. d) The enable secret password and a random username could be used in the next login attempt. CORRECT ANSWERS: b) The authentication process stops. What are two tasks that can be accomplished with the Nmap and Zenmap network tools? (Choose two.) a) password recovery b) password auditing c) identification of Layer 3 protocol support on hosts d) TCP and UDP port scanning e) validation of IT system configuration CORRECT ANSWERS: c) identification of Layer 3 protocol support on hosts d) TCP and UDP port scanning