1.) What are the two methods to hide clear text passwords ?

( ) access-class, enable secret

( ) service password-encryption, enable secret

( ) exec-timeout, service password-encryption

2.) Which of the following is true about SNMP ?

( ) SNMPv2 uses an algorithm called MD5 to authenticate

communications between an SNMP server and agent

( ) SNMPv2 uses no security algorithm

( ) SNMPv2 uses DES encryption by default

( ) SNMP commuity strings are never sent in cleartext ASCII

3.) Which of the following is true about config files ?

( ) can be downloaded from a TFTP server only

( ) can be downloaded from TFTP and MOP

( ) can be downloaded from a TFTP and MacIP server

4.) What means AAA ?

5.) How would you change the login timeout to 90 seconds ?

( ) exec-timeout 90

( ) exec-timeout 1 30

( ) exec-timeout 0 90

( ) exec-timeout 1.5

6.) How to permit only LAT packets to get through in a bridge

filter list, you do:

( ) access-list 201 permit 0x6004 0x0000

access-list 201 deny 0x6000 0xffff

( ) access-list 202 deny 0x6000 0x000f

access-list 202 permit 0x0000 0xffff

7.) To deny all DecNet traffic from getting through in a bridge

filter list:

( ) access-list 203 deny 0x8137 0x0000

access-list 203 permit 0x0000 0xffff

( ) access-list 204 deny 0x6000 0x0000

access-list 204 permit 0x0000 0xffff

( ) access-list 205 deny 0x6000 0x000f

access-list 205 permit 0x0000 0xffff

8.) What does the following command do ?

BRIDGE-GROUP 1 INPUT-LAT-SERVICE-DENY 2 5 12-21

9.) Which of the following is true about DecNet ?

( ) There are many different variations for access lists

and there are no other security features available other

than access lists

( ) There are several different security variations other

than access-lists

( ) There are variations of access lists and variations

of security features

10.) How do you limit the DEC routing updates that get sent out ?

( ) decnet out-routing-filter as an interface subcommand

( ) decnet out-routing-filter as a global command

( ) decnet access-group out as an interface subcommand

11.) What does the following command do ?

interface s 4

IP SECURITY MULTILEVEL UNCLASSIFIED TO SECRET NSA

12.) Which of the following is true about SLIP ?

( ) it is considered a "non-secure" protocol

( ) allows connections over V.35

( ) allows connections over RS232 async high speed

13.) What's the purpose of the hop count info in an IGRP update ?

14.) SPP: connection-oriented or connectionless ?

( ) connection-oriented

( ) connection-less

( ) acknowledged connection-less

15.) What's the hello and update-timer in DEC Phase IV ?

( ) hello 10, update 30

( ) hello 15, update 40

( ) hello 5, update 60

16.) If an IGRP metric is 81235, what's the correlating

EIGRP metric ?

17.) IPX is derived from ?

( ) XNS PEP

( ) XNS SPP

( ) XNS NCP

18.) What means AFP ?

19.) What does the command e/s 200002 do ?

20.) What means SATAN ?

( ) Security Administrator Tool for Analysing Networks

( ) a virus travelling the internet

( ) SATAN opens security holes in a firewall so that hackers

can intrude

21.) What means Intra-Domain-Routing ?

22.) What`s the size of an IGRP packet ?

( ) 256 bytes

( ) 1500 bytes

( ) 512 bytes

23.) What means MD5 ?

24.) What means ARAP ?

25.) What's Kerberos and Radius ?

26.) A DSAP and SSAP value of F0 means what ?

27.) What's the OUI field ?

28.) What`s SNAP ? A header or a protocol ?

29.) Can you fragment AppleTalk packets ? ?

Another happy 'Heinz Ulm"-CCIE 9430

Please contact Heinz Ulm with questions or comments. Fight bullying !!! © Copyright 2000-2009 Heinz Ulm  All rights reserved. All photos are © Copyright Heinz Ulm, except where noted.