QUESTION 111 Which of the following commands must be present on the router (exact syntax would depend on the version) for the user with priviledge level 15 (as defined in their TACACS+ profile) to be dropped into enabled mode immediately when that user telnets into a Cisco router?

A. The global command: aaa authorization exec [default] [group] tacacs+

B. The line command: logon authorization tacacs+

C. The global command: privilege 15 enable

D. The global command: aaa authentication enable default tacacs+ Answer: C

QUESTION 112 Which of the following commands will result in the NAS to use the IP assignment sent from the RADIUS server for a remote PPP peer?

A. aaa authorization default address radius

B. aaa authorization default network radius

C. aaa authentication ppp default radius D. aaa authorization default ipcp radius

E. none of the above Answer: C

QUESTION 113 Which of the following commands can be issued to test to see if SMTP mail is operational on a remote host?

A. 'telnet remote_host 109' and issue the 'hello' command.

B. 'telnet remote_host 110' and issue the 'hello' command.

C. 'telnet remote_host 25' and issue the 'hello' command.

D. 'telnet remote_host 25' and issue the 'esmtp' command. Answer: C

QUESTION 114 The Cisco Highway network administrator was requested to design a dial-in solution that will allows both scripted login for dial in clients and pure PPP login for packet mode connections. The network administrator must configure the NAS to authenticate both types of users with RADIUS. Assuming the lines and interfaces are configured correctly, which of the following represents the correct AAA authentication configuration?

A. aaa new-model aaa authentication login default radius aaa authentication ppp default-if-needed radius

B. aaa new-model aaa authentication default radius

C. aaa new-model aaa authentication slip default radius aaa authentication ppp default radius

D. aaa new-model aaa authentication radius default

E. aaa new-model aaa authentication login default radius aaa authentication ppp default radius

Answer: E

QUESTION 115 What is the maximum number of combinations of a key is possible with a 56-bit key?

A. 1056

B. 228

C. 256

D. 56

E. 56000 Answer: C

QUESTION 116 Which of the following ports are commonly used for Kerberos communication:

A. TCP Port 534

B. TCP/UDP Port 634

C. TCP/UDP Port 88

D. UDP Port 527

E. None of the above. Answer: C

QUESTION 117 Which of the following statements would be valid when an UDP packet has to be fragmented?

A. All fragments hold the UDP header, so that access-lists that look at ports would be usable.

B. The first fragment holds only the UDP header, not the UDP data. The UDP data is transmitted in the subsequent fragments.

C. Only the first fragment has the UDP header.

D. None of the above. Answer: D

QUESTION 118 Which of the following controls Multilink PPP authorization in Cisco Secure?

A. The command

B. Bandwidth Allocation Protocol

C. The command

D. Token caching Answer: C

QUESTION 119 What are the reasons for the differences in convergence for Link State protocols and Distance Vector protocols in general? (Choose all that apply.)

A. Poison reverse updates are sent by link state protocols.

B. The Designated Router handles route calculation centrally and updates all routers.

C. Link state updates are sent to all routers through "flooding".

D. Periodical partial updates from all routers can be processed more quickly than regular full updates from neighbors. Answer: B, D

QUESTION 120 With regard to the CERT/CC, which of the following isd true.

A. It is a clearinghouse for security and vulnerability information.

B. It maintains Secure Computing standards.

C. It provides Certificates of Authority services for the public.

D. It coordinates orchestrated attacks on political network targets.

E. It is in charge of issuing new TLAs for new technologies. Answer: A