CCNA Security Final Exam V2 Questions
and Answers (Latest Update 2024)
Which security measure is best used to limit the success of a
reconnaissance attacks from within a campus area network? -
Correct Answer ✅ implement encryption for sensitive
traffic
Which security implementations will provide control plane
protections for a network devices? - Correct Answer ✅
rounting protocol authentication
Which two practices are associated with securing the features
and performances of router operating systems? (Choose two)
- Correct Answer ✅ Keep a secure copy of router operating
system images
Configure the router with the maximum amount of memory
possible
Refer to the exhibit. An administrator issues these IOS login
enhancement commands to increase the security for login
connections. What can be concluded about them? - Correct
Answer ✅ The hosts that are identified in the ACL will have
access to the device
,CCNA Security Final Exam V2 Questions
and Answers (Latest Update 2024)
What is a characteristic of a role-based CLI view of router
configuration? - Correct Answer ✅ A single CLI view can be
shared within multiple superviews
What is a result of securing the Cisco IOS image using the
Cisco IOS Resilient Configuration feature? - Correct Answer
✅ The Cisco IOS image file is not visible in the output of the
show flash command.
Refer to the exhibit. What two pieces of information can be
gathered from the generated message? (Choose two.) -
Correct Answer ✅ This message is a level five notification
message.
This message indicates that service timestamps have been
globally enabled.
What represents a best practice concerning discovery
protocols such as CDP and LLDP on network devices? -
, CCNA Security Final Exam V2 Questions
and Answers (Latest Update 2024)
Correct Answer ✅ Disbale both protocols on all interfaces
where they are not required
What is the one major difference between local AAA
authentication and using the login local command when
configuring device access authentication? - Correct Answer
✅ Local AAA authentication provides a way to configure
backup methods of authentication, but login local does not.
Refer to the exhibit. A network administrator configures AAA
authentication on R1. The administrator then tests the
configuration by telneting to R1. The ACS servers are
configured and running. What will happen if the
authentication fails? - Correct Answer ✅ The authentication
process stops.
Refer to the exhibit. The administrator can ping the S0/0/1
interface of RouterB but is unable to gain Telnet access to the
router by using the password cisco123. What is a possible
cause of the problem? - Correct Answer ✅ The password
cisco123 is wrong
and Answers (Latest Update 2024)
Which security measure is best used to limit the success of a
reconnaissance attacks from within a campus area network? -
Correct Answer ✅ implement encryption for sensitive
traffic
Which security implementations will provide control plane
protections for a network devices? - Correct Answer ✅
rounting protocol authentication
Which two practices are associated with securing the features
and performances of router operating systems? (Choose two)
- Correct Answer ✅ Keep a secure copy of router operating
system images
Configure the router with the maximum amount of memory
possible
Refer to the exhibit. An administrator issues these IOS login
enhancement commands to increase the security for login
connections. What can be concluded about them? - Correct
Answer ✅ The hosts that are identified in the ACL will have
access to the device
,CCNA Security Final Exam V2 Questions
and Answers (Latest Update 2024)
What is a characteristic of a role-based CLI view of router
configuration? - Correct Answer ✅ A single CLI view can be
shared within multiple superviews
What is a result of securing the Cisco IOS image using the
Cisco IOS Resilient Configuration feature? - Correct Answer
✅ The Cisco IOS image file is not visible in the output of the
show flash command.
Refer to the exhibit. What two pieces of information can be
gathered from the generated message? (Choose two.) -
Correct Answer ✅ This message is a level five notification
message.
This message indicates that service timestamps have been
globally enabled.
What represents a best practice concerning discovery
protocols such as CDP and LLDP on network devices? -
, CCNA Security Final Exam V2 Questions
and Answers (Latest Update 2024)
Correct Answer ✅ Disbale both protocols on all interfaces
where they are not required
What is the one major difference between local AAA
authentication and using the login local command when
configuring device access authentication? - Correct Answer
✅ Local AAA authentication provides a way to configure
backup methods of authentication, but login local does not.
Refer to the exhibit. A network administrator configures AAA
authentication on R1. The administrator then tests the
configuration by telneting to R1. The ACS servers are
configured and running. What will happen if the
authentication fails? - Correct Answer ✅ The authentication
process stops.
Refer to the exhibit. The administrator can ping the S0/0/1
interface of RouterB but is unable to gain Telnet access to the
router by using the password cisco123. What is a possible
cause of the problem? - Correct Answer ✅ The password
cisco123 is wrong
