Cisco Certified Network Associate (CCNA)1,334 questions across 134 pages are complete and free, with no account or card.
1334 questions in this bank
Free access · progress saved on this device
Which technology must be implemented to configure network device monitoring with the highest security?
Answer: D
"..device monitoring....highest security" Netflow although related to security generally is just a data collection protocol whereas the whole point of SNMPv3 is that it's hardened answer here should be D
Source: Adapted from community discussion — martco
Refer to the exhibit. Which two statements about the interface that generated the output are true? (Choose two.)
Answer: AC
B - wrong. only shuts int when violation mode is "shutdown" D - wrong. dynamically learned only 2 MACADD using sticky command E - wrong. only increments on "restrict" and "shutdown" violation mode Answer - A, C
Source: Adapted from community discussion — Chupacabro
Which two options are the best reasons to use an IPV4 private IP space? (Choose two.)
Answer: AD
AI said:The correct answers to the question "Which two options are the best reasons to use an IPv4 private IP space?" are: A. To enable intra-enterprise communication D. To conserve global address space Private IP addresses can be used within an organization for communication between devices without the need for unique public addresses . This helps to conserve the limited supply of IPv4 addresses available globally, which is a finite resource. Private IP addresses are not routable on the public internet and can be used within an organization without conflicts with public addresses. Therefore, options A and D are the best reasons to use an IPv4 private IP space. Option B- to implement NAT , option C- to connect applications, and option E- to manage routing overhead don't refer to the use of private IP addresses directly. However, NAT can be used to translate private addresses to public addresses for access to the internet.
Source: Adapted from community discussion — dearc
Refer to the exhibit. Which statement about the interface that generated the output is true?
Answer: B
Restrict: The offending frame is dropped and an SNMP trap and a Syslog message are generated. The security violation causes the violation counter to increment. Shutdown: The offending frame is dropped. The interface is placed in an error-disabled state and an SNMP trap and a Syslog message are generated.
Source: Adapted from community discussion — Subit123
Refer to the exhibit. What is the effect of this configuration?
Answer: C
Dynamic ARP inspection (DAI) is a security feature that validates ARP packets in a network. It intercepts, logs, and discards ARP packets with invalid IP-to-MAC address bindings. This capability protects the network from certain man-in-the-middle attacks. After enabling DAI, all ports become untrusted ports.
Source: Adapted from community discussion — LTTAM
What is the difference between AAA authentication and authorization?
Answer: A
I like people who are able to simplify things to others :) Einstein said “If you can't explain it to a six year old, you don't understand it yourself.”
Source: Adapted from community discussion — ac89l
When configuring a WLAN with WPA2 PSK in the Cisco Wireless LAN Controller GUI, which two formats are available to select? (Choose two.)
Answer: BC
If you chose PSK in Step 7, choose ASCII or HEX from the PSK Format drop-down list and then enter a preshared key in the blank text box. WPA preshared keys must contain 8 to 63 ASCII text characters or 64 hexadecimal characters. The PSK parameter is a set-only parameter. The value set for the PSK key is not visible to the user for security reasons. For example, if you selected HEX as the key format when setting the PSK key, and later when you view the parameters of this WLAN, the value shown is the default value. The default is ASCII
Source: Adapted from community discussion — poovnair
DRAG DROP - Drag and drop the AAA functions from the left onto the correct AAA services on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
An engineer is asked to protect unused ports that are configured in the default VLAN on a switch. Which two steps will fulfill the request? (Choose two.)
Answer: CD
The answer is trying to say is that put the ports into access vlan so that it does not get dtp traffic and put it under an unused vlan that is not in the network, for this example is 99...this is the best practice. Answers C & D is correct.
Source: Adapted from community discussion — ZayaB
An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe, but the link may have contained malicious code. Which type of security program is in place?
Answer: A
My company send phishing emails on purpose. If you click on the link. They make you take a security awareness training :)
Source: Adapted from community discussion — creaguy
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
200-301 practice, question 911. 1334 questions available.
Version 1.0.0. How we source questions