IINS Implementing Cisco IOS Network Security Exam.

Transcription

1 Cisco IINS Implementing Cisco IOS Network Security Exam TYPE: DEMO Examskey Cisco exam demo product is here for you to test quality of the product. This Cisco demo also ensures that we have this product ready unlike most companies, which arrange the product for you as you order these exam questions are prepared by Cisco subject matter specialists. Hence these are most accurate version of the exam questions that you can get in the market. We also offer bundle discount packages for every Cisco certification track, so you can buy all related exam questions in one convenient bundle. And for corporate clients we also offer bundles for Cisco certification exams at huge discount. Check out our Exam Page and Cisco Certification Page for more details of these bundle packages. 1

2 Question: 1 Which access list will permit HTTP traffic sourced from host port 3030 destined to host ? A. access-list 101 permit tcp any eq 3030 B. access-list 101 permit tcp eq eq www C. access-list 101 permit tcp eq www eq www D. access-list 101 permit tcp host eq eq 3030 E. access-list 101 permit tcp eq F. access-list 101 permit ip host eq 3030 host eq 80 Answer: B Question: 2 DRAG DROPDrag three proper statements about the IPsec protocol on the above to the list on the below. 2

3 A. Answer Pending Answer: A Question: 3 In a brute-force attack, what percentage of the keyspace must an attacker generally search through until he or she finds the key that decrypts the data? A. Roughly 50 percent B. Roughly 66 percent C. Roughly 75 percent D. Roughly 10 percent Answer: A Question: 4 3

4 The information of Cisco Router and Security Device Manager(SDM) is shown below: 4

5 5

6 6

7 7

8 8

9 9

10 Within the "sdm-permit" policy map, what is the action assigned to the traffic class "class-default"? A. inspect B. drop C. police D. pass Answer: B Question: 5 DRAG DROPOn the basis of the description of SSL-based VPN, place the correct descriptions in the proper locations. 10

11 A. Answer Pending Answer: A Question: 6 Refer to the exhibit and partial configuration. Which statement is true? 11

12 A. All traffic destined for network will be denied due to the implicit deny all. B. All traffic from network will be permitted. C. Access-list 101 will prevent address spoofing from interface E0. D. This is a misconfigured ACL resulting in traffic not being allowed into the router in interface S0. E. This ACL will prevent any host on the Internet from spoofing the inside network address as the source address for packets coming into the router from the Internet. Answer: C Question: 7 Which of these can be used to authenticate the IPsec peers during IKE Phase 1? A. Diffie-Hellman Nonce B. pre-shared key C. XAUTH D. integrity check value E. ACS F. AH Answer: B 12

13 Question: 8 Which description about asymmetric encryption algorithms is correct? A. They use the same key for encryption and decryption of data. B. They use different keys for decryption but the same key for encryption of data. C. They use different keys for encryption and decryption of data. D. They use the same key for decryption but different keys for encryption of data. Answer: C Question: 9 For the following items, which management topology keeps management traffic isolated from production traffic? A. OTP B. OOB C. SAFE D. MARS Answer: B Question: 10 You work as a network engineer, do you know an IPsec tunnel is negotiated within the protection of which type of tunnel? A. L2F tunnel B. L2TP tunnel C. GRE tunnel D. ISAKMP tunnel Answer: D 13

14 Thank You for Trying Our Product Cisco IINS Implementing Cisco IOS Network Security Exam TYPE: DEMO View list of All certification exams: Average 100% Success Rate. 100% Money Back Guarantee Study Material Updated On Regular Basis. Instant Download Access! After Purchased Services Of Professional & Certified Experts Available Via Support Round-The-Clock Client Support, Safe Website For Shopping Besides money back guarantee, our also offer 3 months free updates to the exam questions to reflect the changes as (& if) they are introduced by the Cisco. 14