Exam Title

: Nortel 920-253 : NCDS-Nortel VPN Router (Contivity)Rls.6.0

Version : R6.1

www.prepking.com

Prepking - King of Computer Certification Important Information, Please Read Carefully

Other Prepking products A) Offline Testing engine Use the offline Testing engine product to practice the questions in an exam environment. B) Study Guide (not available for all exams) Build a foundation of knowledge which will be useful also after passing the exam. Latest Version We are constantly reviewing our products. New material is added and old material is updated. Free updates are available for 90 days after the purchase. You should check your member zone at Prepking and update 3-4 days before the scheduled exam date. Here is the procedure to get the latest version: 1.Go towww.Prepking.com 2.Click on Member zone/Log in (right side) 3. Then click My Account 4.The latest versions of all purchased products are downloadable from here. Just click the links. For most updates,it is enough just to print the new questions at the end of the new version, not the whole document. Feedback If you spot a possible improvement then please let us know. We always interested in improving product quality. Feedback should be send to feedback@Prepking.com. You should include the following: Exam number, version, page number, question number, and your login ID. Our experts will answer your mail promptly. Copyright Each PDF file contains a unique serial number associated with your particular name and contact information for security purposes. So if we find out that a particular PDF file is being distributed by you, Prepking reserves the right to take legal action against you according to the International Copyright Laws. Explanations This product does not include explanations at the moment. If you are interested in providing explanations for this exam, please contact feedback@Prepking.com..

www.prepking.com

 1. A customer wants to be notified about events using e-mail. Which two can you set up using e-mail? (Choose two.) A. System failure B. Network failure C. SYSLOG activity D. File Transfer errors Answer: CD

2. When designing a Contivity VPN router firewall solution for a customer you are asked about the different methods of managing the Contivity VPN router. Which two are actual methods? (Choose two.) A. Web GUI B. Serial menu C. EasyInstall Tool D. Net Saint Manager E. command line interface Answer: AE

3. Which two are ways to access the Nortel command line interface? (Choose two.) A. FTP B. Telnet C. WWW D. serial port Answer: BD

4. A customer changes the management of the serial port from serial menu to PPP. What must you do to enable this change? A. Use the recovery disk. B. Default the Contivity VPN router. C. Reboot the Contivity VPN router. D. Set the menu access to restricted.
www.prepking.com

 Answer: C

5. A customer wants to record and view events occurring in the server and client from a centralized location using Contivity Configuration Manager (CCM). The customer wants to look at the log files. What are two log files that can be viewed? (Choose two.) A. err.log B. sys.log C. errlog.txt D. syslog.txt Answer: CD

6. A customer is concerned about managing security using their Contivity VPN router firewalls.

In

designing the solution, you have decided to use the Contivity Configuration Manager (CCM). The customer is concerned about using the Web server. What is the simplest way to increase security? A. Do not use the Web server. B. There is nothing to be done. C. Suggest using something other than CCM. D. Change the default port from 80 to a non-standard port. Answer: D

7. You are setting the IP address for the Contivity VPN router management interface. You mention to the customer that this is a crucial IP address. The customer wants to know why. What do you tell the customer? A. It is the IP address to which all network traffic is sent. B. It is the IP address to which all network management is associated. C. Once this IP has been set, you must default the Contivity VPN router in order to change it. D. It is the IP address to which all encryption algorithms base part of their encryption routines. Answer: B

8. A customer wants to record and view events occurring in the server and client from a centralized location using Contivity Configuration Manager (CCM). The customer is specifically concerned with events
www.prepking.com

 occurring on the server. Which log file stores these events? A. srv.log B. srvlog.txt C. server.txt D. server.log Answer: B

9. A company wants to use a single device to allow both tunneled and untunneled traffic for a remote office. What can be implemented on the Contivity VPN router to allow both types of packets to pass between public and private interfaces? (Choose two.) A. Split-tunneling B. Branch Office Tunnel C. Contivity VPN router Tunnel Filters D. Contivity VPN router Interface Filters E. Contivity VPN router Stateful Firewall Answer: DE

10. A network planner is designing a solution for a company that has a head office and 50 branch offices. The company currently uses private lines to connect the branch offices to the head office. The internet

connection setup at the head office consists of a router and a firewall which are bottlenecks. The CEO wants to use a VPN instead of the leased lines. What is the best solution for the head office? A. Use the Contivity VPN router in between the router and firewall. B. Use the Contivity VPN router behind the firewall, in place of the router. C. Use the Contivity VPN router to replace the existing router and firewall. D. Use the Contivity VPN router behind the existing router, in place of the firewall. Answer: C

11. Given a need to support dynamic routing, which two interface types can be configured to support OSPF and RIP? A. Utunnels
www.prepking.com

(Choose two.)

 B. Public Interface C. Private Interface D. End User Tunnels E. Branch-to-Branch Tunnels Answer: CE

12. Because of recent spoofing attacks on the internet, a customer is concerned about vulnerability. The customer was told that their Contivity VPN router has an anti-spoofing mechanism designed to help protect against such attacks. How does the Contivity VPN router do this? A. by validating the source port B. by validating the TCP sequence number C. by validating the source IP using the firewall D. by validating the destination address is not 0.0.0.0 Answer: C

13. A Contivity VPN router is to be added to the network to support remote access VPN tunnels. It is installed between an existing router, which is connected to the internet, and a firewall, which protects the private network. Which variable would you have to consider with this design choice? A. whether the firewall can support the expected increase in traffic load B. whether the second connection to the internet should go through a different ISP C. whether the router has enough ports to support the extra connection to the switch D. which PCs on the private network should use the Contivity VPN router as their gateway Answer: A

14. A customer plans to purchase a Contivity VPN router solution and has the following requirements: Support for a maximum of 1500 tunnels. A clear text PPP private WAN interface connecting two buildings on the company's campus. Secure tunnels originating on a public LAN interface and traversing an existing router to access the customer's ISP. Which Contivity VPN router solution would you recommend?
www.prepking.com

 A. Contivity 1750 to support both the tunnel requirement on the public LAN interface and the private WAN interface B. Contivity 2700 to support both the tunnel requirement on the public LAN interface and the private WAN interface C. Contivity 2700 to support the Private WAN interface and a Contivity 1750 to support the tunnel requirement on the public LAN interface D. Contivity 2700 to support the tunnel requirement on the public LAN interface and a separate router solution to support the private WAN interface Answer: B

15. A customer wants to ensure that its firewall supports "Anti-Spoofing". What is the reason for using Anti-Spoofing as a means for providing network protection? A. IP source address equal to 0 B. invalid combinations of IP flags C. ICMP packet larger than 65536 bytes D. multiple copies of the same IP fragment Answer: A

16. In setting up its Contivity VPN router, a company wishes to allow untunneled UDP traffic between the private and the public networks. The company also wants to ensure that unsolicited UDP reply packets

are dropped. Which feature would facilitate this? A. Anti-spoofing B. Interface filters C. Contivity VPN router Stateful Firewall D. Interface NAT with one-to-one translation Answer: C

17. Which three features are part of the Contivity VPN router Advanced Routing package? (Choose three.) A. RIP
www.prepking.com

 B. VRRP C. DHCP D. OSPF E. ECMP Answer: BDE

18. A customer with a 1500-tunnel environment wants a high-availability solution in case a processor on the Contivity VPN router fails. Which solution addresses this need? A. a dual-processor Contivity 1750 B. a dual-processor Contivity 2700 C. two single-processor Contivity 1750s D. two single-processor Contivity 2700s Answer: D

19. One reason why RIP is not deployed in large-scale networks is because the maximum number of hops (or routers) from the origin subnet to the target subnet is limited to ________. A. 15 B. 16 C. 255 D. 256 Answer: A

20. A Contivity VPN router will be added to a customer's network to allow for VPN tunnels. The initial plan is to have the Contivity VPN router installed between an existing router; which is connected to the internet and a firewall; which protects the private network. What should you suggest to the customer to simplify the solution? A. Stay with the initial plan and suggest nothing more. B. Use the Contivity VPN router to its full potential and remove the router. C. Use the Contivity VPN router to its full potential and remove the firewall. D. Use the Contivity VPN router to its full potential and remove the router and the firewall.
www.prepking.com

 Answer: D

21. A customer with a 100-tunnel environment wants a high-availability solution in case the power supply on the Contivity VPN router fails. What is the least expensive solution that addresses this need? A. two Contivity 1750s B. two Contivity 2700s C. a Contivity 1750 with an extra 10/100 Ethernet expansion card D. a Contivity 2700 with an extra 10/100 Ethernet expansion card Answer: A

22. A customer has several branch offices using AES-128 encryption. The customer is concerned about its vulnerability to an attack. Which two actions can the customer do to lessen fears of attack? (Choose two.) A. Upgrade to 6.0. B. Change to AES-256. C. Change to 56 bit DES. D. Change from using branch office tunnels to user tunnels. Answer: AB

23. A company has a firewall and a router between its private LAN and a public Frame Relay WAN connection at its head office. The company has a requirement to add 1000 tunnels using a Contivity VPN

router. What is the most cost effective solution? A. Replace the router and firewall with a Contivity 2700 and connect directly to the Frame Relay network. B. Replace the router and firewall with a Contivity 5000 and connect directly to the public Frame Relay network. C. Replace the firewall with a Contivity 5000 but maintain the router to support the Frame Relay WAN connection. D. Maintain the router and firewall for the existing infrastructure and add a Contivity 1750 to support the 1000 VPN tunnels. Answer: A

www.prepking.com

 24. The customer needs to support dynamic routing to the internet using BGP, which three interface types can be configured to support BGP? (Choose three.) A. Utunnels B. Public Interface C. Private Interface D. End User Tunnels E. Branch-to-Branch Tunnels Answer: BCE

25. A customer network includes a central office and several branch offices.

The router at the branch

office must support 100 tunnels, a firewall, and OSPF routing. Which Contivity VPN router would meet the minimum processing (CPU) requirements for this scenario? A. Contivity 600 B. Contivity 1750 C. Contivity 2700 D. Contivity 5000 Answer: B

26. A small business customer wants secure internet connectivity with firewall-based perimeter defense functions in a single device. The customer also wants the device to have ADSL capability. Which Nortel product will meet the customer's requirements? A. Contivity 221 B. Contivity 251 C. Contivity 1700 D. Contivity 5000 Answer: B

27. A small business customer wants to purchase a Nortel Contivity VPN router. The customer requires a unit with a public Ethernet port, capability for two tunnels, and the capability to add two more tunnels in the future. Which Contivity VPN router model will fit the customer's needs?
www.prepking.com

100% Pass Guaranteed or Full Refund Word to Word Real Exam Questions from Real Test Buy full version of exam from this link below http://www.prepking.com/920-253.htm