200-301 practice questions 1,331–1,334

1. Question 1331 · 1334 in bank

   Which security method is used to prevent man-in-the-middle attacks?

   • Aauthentication
   • Banti-replay
   • Cauthorization
   • Daccounting

   Show answer

   Answer: A

   Explanation

   Anti-replay is a security method that is used to prevent man-in-the-middle attacks by ensuring that network packets are received and processed only once. This is typically accomplished by adding a unique identifier, called a sequence number or nonce, to each packet. The recipient of the packet keeps track of the sequence numbers that it has received and processes only packets that have not been received before. If a packet with a duplicate sequence number is received, it is discarded.

   Source: Adapted from community discussion — mageknight

   Next question

2. Question 1332 · 1334 in bank

   Which cipher is supported for wireless encryption only with the WPA2 standard?

   • ARC4
   • BAES
   • CSHA
   • DAES256

   Show answer

   Answer: B

   Next question

3. Question 1333 · 1334 in bank

   

   Refer to the exhibit. This ACL is configured to allow client access only to HTTP, HTTPS, and DNS services via UDP. The new administrator wants to add TCP access to the ONS service. Which configuration updates the ACL efficiently?

   • Ano ip access-list extended Services ip access-list extended Services 30 permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain
   • Bip access-list extended Services 35 permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain
   • Cip access-list extended Services permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain
   • Dno ip access-list extended Services ip access-list extended Services permit udp 10.0.0.0 0.255.255.255 any eq 53 permit tcp 10.0.0.0 0.255.255.255 host 198.51.100.11 eq domain deny ip any any log

   Show answer

   Answer: B

   Explanation

   Option A will delete the ACL completely and create a new one with only one entry, which is not efficient. Option C is missing the line number and will insert the new entry at the beginning of the list, which may affect the order of other rules. Option D allows access to both UDP and TCP DNS services and adds an unnecessary entry at the end that denies all other IP traffic. This option is not efficient and may cause issues. Option B adds a new entry to the existing ACL with the appropriate line number and rule syntax, allowing TCP access to the ONS service while keeping the existing rules for HTTP, HTTPS, and DNS services. This option is the most efficient and effective way to update the ACL.

   Source: Adapted from community discussion — Simon_1103

   Next question

4. Question 1334 · 1334 in bank

   Which WPA mode uses PSK authenticaton?

   • ALocal
   • BPersonal
   • CEnterprise
   • DClient

   Show answer

   Answer: B

   Explanation

   The WPA mode that uses PSK (Pre-Shared Key) authentication is the Personal mode. WPA (Wi-Fi Protected Access) is a security protocol used in wireless networks to protect the communication between devices. WPA has two modes of operation: Personal mode and Enterprise mode. Personal mode, also known as WPA-PSK (Pre-Shared Key), uses a shared secret key (PSK) to authenticate wireless clients and encrypt network traffic. The PSK is a passphrase or password that is shared between the access point and wireless clients. Enterprise mode, also known as WPA-EAP (Extensible Authentication Protocol), uses a RADIUS (Remote Authentication Dial-In User Service) server to authenticate wireless clients. Enterprise mode provides stronger security than Personal mode, but it requires more setup and infrastructure. In summary, WPA-Personal mode uses PSK authentication, while WPA-Enterprise mode uses RADIUS server authentication.

   Source: Adapted from community discussion — Ciscoman021

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 1331. 1334 questions available.