Beruflich Dokumente
Kultur Dokumente
administrative distance
cost
hop count
passive interface
Which three algorithms can be used to encrypt user data in an IPSec VPN framework? (Choose
three.)
3DES
AES
Diffie-Hellman
DES
ESP
SHA
Which flag is set by a Frame Relay switch to inform the receiving station that congestion was
experienced?
BECN
DE
FECN
FCS
Scoring Rule For: correctness of response
2 points for Option 3
0 points for any other option
Max Value = 2
Refer to the exhibit. The complete configuration of a Frame Relay interface on the Chicago router
is shown. How does the Chicago router know which DLCI is mapped to the IP address of the
remote router?
DE
CIR
FECN
Inverse ARP
What statement correctly defines the purpose of the split horizon rule?
marks the route unreachable in a routing update that is sent to other routers
prevents routers from advertising a network through the interface from which the update
came
prevents routers from accepting higher cost routes to networks previously marked as
inaccessible before the timer expires
limits the number of hops a packet can traverse through the network before it should be
discarded
Which PVC status suggests that the router recognizes the DLCI configured on its interface as
being present on the Frame Relay switch, but the PVC associated with the DLCI is not capable of
end-to-end communication?
active
deleted
inactive
idle
Refer to the exhibit. Which router command is used to associate a Layer 2 address with the
corresponding Layer 3 address?
Miller(config-if)#frame-relay map ip 172.16.150.1 110
Miller(config-if)#frame-relay map ip 172.16.150.1 112
Miller(config-if)#frame-relay map ip 172.16.150.2 110
Miller(config-if)#frame-relay map ip 172.16.150.2 112
A network administrator issued the command show frame-relay pvc. The response from the
router shows the status of a PVC as deleted. What is the reason for this status?
The DLCI is using the wrong LMI type.
The DLCI is usable but has little activity.
The DLCI is programmed in the switch but the circuit is not usable.
The DLCI configured on the CPE device does not match the DLCI.
What are two components a network designer considers when planning a VPN? (Choose two.)
encryption algorithm for privacy and security
encapsulation protocol to use when creating the VPN tunnel
switching technology to optimize VPN WAN throughput
tunneling technology for guarding against data corruption
routing protocol on the gateway for optimum performance
When identifying VPN requirements for endpoint users, what care must be taken to protect the
network when remote users log in from unsecured public locations?
Ensure that the user has VPN client software that allows access to all internal resources.
Ensure that the VPN user traffic does not slow down internally sourced traffic on the
network.
Ensure that there are no obstacles to hamper the users from accessing all internal
resources.
Ensure that remote users can only access network resources that are appropriate to their
job function.
What tool can help ease the configuration of VPN servers on routers?
Cisco SDM
PIX Firewall
Cisco VPN Concentrator
Cisco Adaptive Security Appliances
What is used to identify the path to the next frame-relay switch in a Frame Relay network?
CIR
DLCI
FECN
BECN
Which two statements are true regarding VPN security? (Choose two.)
Users may only establish a VPN connection from secure locations and never from public
areas.
Users that connect to a network through a VPN do not have to log in to resources on the
network.
Users that connect to a network through a VPN are are considered trusted users on the
network.
Users may establish a VPN connection from unsecure locations such as airports and
hotel lobbies.
Users that connect to a network through a VPN should have access to all the resources
on the network.
Refer to the exhibit. What is placed in the address field of a frame that will travel from the Orlando
office to the DC office?
MAC address of the Orlando router
MAC address of the DC router
192.168.1.25
192.168.1.26
DLCI 100
DLCI 200
Two directly connected routers are able to ping each other through the
Serial 0/0/0 interfaces. A network administrator changes the encapsulation on one router to PPP,
and the other is left at the default value. What statement would appear in the output of the show
interfaces command issued on one of the routers?
Serial 0/0/0 is up, line protocol is up
Serial 0/0/0 is down, line protocol is down
Serial 0/0/0 is up, line protocol is down
Serial 0/0/0 is down, line protocol is up
Serial 0/0/0 is administratively down, line protocol is down
3 A company uses serial interfaces on its border router to connect to branch offices
through WAN connections. The security policy dictates that the encapsulation should use PPP
with authentication protocol CHAP. Which statement is true about the configuration requirement
of CHAP?
Both the username and password are case sensitive.
Neither the username nor the password is case sensitive.
The username is case sensitive but the password is not case sensitive.
The password is case sensitive but the username is not case sensitive.
18 Which two statements about split tunnels are true? (Choose two.)
Local LAN printing will use the VPN tunnel.
The traffic load on the VPN server is increased.
Traffic to the corporate network will be encrypted.
There is a reduced security risk to the corporate network.
All traffic travels across the VPN tunnel from client to server.
Traffic to public web sites and general Internet navigation is not encrypted.
20 An IP address has been assigned to the S0/0/0 interface of a new Cisco router.
The administrator wishes to quickly test basic connectivity with the serial interface of an adjoining
Cisco router via the use of the default WAN protocol. Which WAN protocol will be used for this
test?
PPP
Frame Relay
DSL
HDLC
ATM
Which two statements about split tunnels are true? (Choose two.)
Local LAN printing will use the VPN tunnel.
The traffic load on the VPN server is increased.
Traffic to the corporate network will be encrypted.
There is a reduced security risk to the corporate network.
All traffic travels across the VPN tunnel from client to server.
Traffic to public web sites and general Internet navigation is not encrypted.
Scoring Rule For: correctness of response
Option 3 and Option 6 are correct.
1 point for each correct option.
0 points if more options are selected than required.