200-301 practice questions 981–990

1. Question 981 · 1334 in bank

   Which type if network attack overwhelms the target server by sending multiple packets to a port until the half-open TCP resources of the target are exhausted?

   • ASYN flood
   • Breflection
   • Cteardrop
   • Damplification

   Show answer

   Answer: A

   Explanation

   A SYN flood is a type of network attack that overwhelms the target server by sending a large number of SYN packets (the first step in establishing a TCP connection) to a specific port, without completing the connection handshake. This flood of half-open TCP connections consumes the server's resources, leading to a denial-of-service (DoS) condition, as the server becomes unable to handle legitimate connection requests.

   Source: Adapted from community discussion — RODCCN

   Next question

2. Question 982 · 1334 in bank

   Select 2

   Which two components comprise part of a PKI? (Choose two.)

   • Apreshared key that authenticates connections
   • Bone or more CRLs
   • CRSA token
   • DCA that grants certificates
   • Eclear-text password that authenticates connections

   Show answer

   Answer: BD

   Explanation

   A) A PSK has nothing to do with PKIs B) A CRL informs devices when a certificate is revoked/withdrawn C) RSA token has nothing to do with PKIs D) A certificate authority is center of the flow of trust E) I have no idea what they're meaning here but maybe this is just another PSK reference B and D are clear answers. More reading here: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_pki/configuration/xe-3s/sec-pki-xe-3s-book/sec-cfg-auth-rev-cert.html

   Source: Adapted from community discussion — Request7108

   References

   • Cisco documentation

   Next question

3. Question 983 · 1334 in bank

   DRAG DROP - Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

4. Question 984 · 1334 in bank

   After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password. Which configuration must the engineer apply to accomplish this task?

   • Aaaa new-model line con 0 password plaintextpassword privilege level 15
   • Baaa new-model aaa authorization exec default local aaa authentication login default radius username localuser privilege 15 secret plaintextpassword
   • Cusername localuser secret plaintextpassword line con 0 no login local privilege level 15
   • Dusername localuser secret plaintextpassword line con 0 login authentication default privilege level 15

   Show answer

   Answer: D

   Explanation

   I could be wrong but... A.Only password no local username B."aaa auth login default radius" doesn't work in Packet Tracer, "aaa auth login default group radius" works. C."no login local" is the opposite of what we want. D.The only downside i see with this is that i think you need to implement on each device separately, but since there was a security breach and a Radius failure, i think we are stuck with this option anyway? So D?

   Source: Adapted from community discussion — splashy

   Next question

5. Question 985 · 1334 in bank

   Which wireless security protocol relies on Perfect Forward Secrecy?

   • AWEP
   • BWPA2
   • CWPA
   • DWPA3

   Show answer

   Answer: D

   Explanation

   WPA3 (Wi-Fi Protected Access 3) is the newest wireless security protocol designed to encrypt data using a frequent and automatic encryption type called Perfect Forward Secrecy.

   Source: Adapted from community discussion — ShadyAbdekmalek

   Next question

6. Question 986 · 1334 in bank

   What is a zero-day exploit?

   • AIt is when the network is saturated with malicious traffic that overloads resources and bandwidth.
   • BIt is when an attacker inserts malicious code into a SQL server.
   • CIt is when a new network vulnerability is discovered before a fix is available.
   • DIt is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.

   Show answer

   Answer: C

   Next question

7. Question 987 · 1334 in bank

   What is a recommended approach to avoid co-channel congestion while installing access points that use the 2.4 GHz frequency?

   • Adifferent nonoverlapping channels
   • Bone overlapping channel
   • Cone nonoverlapping channel
   • Ddifferent overlapping channels

   Show answer

   Answer: A

   Explanation

   I agree, A. it is. Each AP operates in one channel. The goal is that neighboring APs don't use the same channel, so you need multiple non-overlapping channel, or you have co-channel interference, which slows down your wireless operation. (Adjacent channel interference causes collisions)

   Source: Adapted from community discussion — Scooter96

   Next question

8. Question 988 · 1334 in bank

   Select 2

   A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing. Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

   • Atransport input ssh
   • Btransport input all
   • Ccrypto key generate rsa modulus 2048
   • Dcrypto key generate rsa general-keys modulus 1024
   • Ecrypto key generate rsa usage-keys

   Show answer

   Answer: AC

   Explanation

   Bad question, playing with english.... "doubling the modulus size from 1024"... why not just say "change the modulus size to 2048"...

   Source: Adapted from community discussion — battlefate

   Next question

9. Question 989 · 1334 in bank

   Select 2

   What are two examples of multifactor authentication? (Choose two.)

   • Asingle sign-on
   • Bsoft tokens
   • Cpasswords that expire
   • Dshared password repository
   • Eunique user knowledge

   Show answer

   Answer: BE

   Explanation

   The correct answers are (E) unique user knowledge and (B) soft tokens. Explanation: Single sign-on (SSO) is not an example of multifactor authentication. SSO allows users to access multiple applications with a single set of credentials. Passwords that expire are a security policy that enforces regular password changes, but this is not an example of multifactor authentication on its own. Soft tokens are a form of multifactor authentication. They are typically software-based applications that generate one-time passwords or time-based codes for users to use along with their regular passwords. Shared password responsibility is not an example of multifactor authentication. It refers to the practice of distributing account credentials among multiple people, which is generally not recommended for security reasons.

   Source: Adapted from community discussion — Cynthia2023

   References

   • Cisco documentation

   Next question

10. Question 990 · 1334 in bank

    Which characteristic differentiates the concept of authentication from authorization and accounting?

    • Aconsumption-based billing
    • Bidentity verification
    • Cuser-activity logging
    • Dservice limitations

    Show answer

    Answer: B

    Explanation

    I fail to see the problem with this question. Pretty obvious answer though. Authentication is all about performing “identity verification”.

    Source: Adapted from community discussion — PaddyInNZ

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

200-301 practice, question 981. 1334 questions available.