Discussion
Home ‣ Certification ‣ CISCO Certification Comments
- Question
What command would you use to set an access list on a VTY line?
- Correct Answer
- line vty 0 4 access - class 110 in
- 1. What command would you use to create an extended access list that stops host 172.16.10.1 fro telnetting to host 172.16.30.5? Discuss
- 2. What is the most common attack on a network today?
Options- A. Lock picking
- B. Naggle
- C. DoS
- D. auto secure Discuss
- 3. Which command would you use to apply an access list to a router interface?
Options- A. ip access - list 101 out
- B. acces - list ip 101 in
- C. ip access - group 101 in
- D. access - group ip 101 in Discuss
- 4. If you wanted to deny all Telnet connections to only network 192.168.10.0, which command could you use?
Options- A. access-list 100 deny tcp 192.168.10.0 255.255.255.0 eq telnet
- B. access-list 100 deny tcp 192.168.10.0 0.255.255.255 eq telnet
- C. access - list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23
- D. access - list 100 deny 192.168.10.0 0.0.0.255 any eq 23 Discuss
- 5. What router command allows you to determine whether an IP access list is enabled on a particular interface?
Options- A. show ip port
- B. show access - lists
- C. show ip interface
- D. show access - lists interface Discuss
- 6. Which command will allow you to see real - time translations on your router?
Options- A. show ip nat translations
- B. show ip nat statistics
- C. debug ip nat
- D. clear ip nat translations Discuss
- 7. Which command will create a dynamic pool named Todd that will provide you with 30 global addresses?
Options- A. ip nat pool Todd 171.16.10.65 171.16.10.94 net 255.255.255.240
- B. ip nat pool Todd 171.16.10.65 171.16.10.94 net 255.255.255.224
- C. ip nat pool todd 171.16.10.65 171.16.10.94 net 255.255.255.224
- D. ip nat pool Todd 171.16.10.1 171.16.10.254 net 255.255.255.0 Discuss
- 8. When creating a pool of global address, which of the following can be used instead of the netmask command?
Options- A. / (slash notation)
- B. prefix - length
- C. no mask
- D. block - size Discuss
- 9. Which of the following is considered to be the inside hosts address after translation?
Options- A. Inside local
- B. outside local
- C. Inside global
- D. Outside global Discuss
- 10. Your inside locals are not being translated to the inside global addresses. Which of the following commands will show you if your inside globals are allowed to use the NAT pool? ip nat pool Corp 198.18.41.129 198.18.41.134 netmask 255.255.255.248 ip nat inside source list 100 int pool Corp overload
Options- A. debug ip nat
- B. show access - list
- C. show ip nat translation
- D. show ip nat statistics Discuss
CISCO Certification problems
Search Results
Correct Answer: access - list 110 deny tcp host 17216101 host 17216305 eq 23 access - list 110 permit ip any any
Correct Answer: DoS
Explanation:
The most common attack on a network today is a denial of service (DoS) because they are the easiest attack to achieve.
Correct Answer: ip access - group 101 in
Explanation:
To apply an access list , the proper command is ip access - group 101 in.
Correct Answer: access - list 100 deny tcp any 192.168.10.0 0.0.0.255 eq 23
Explanation:
The extended access list ranges are 100 - 199 and 2000 - 2699, so the access-list number of 100 is valid. Telnet uses TCP, so the protocol TCP is valid. Now you just need to look for the source and destination address. only the third option has the correct sequence of parameters. Option B may work, but the question specifically states "only" to network 192.168.10.0, and the wildcard in option B is too broad.
Correct Answer: show ip interface
Explanation:
Of the available choices only the show ip interface command will tell you which interfaces have access lists applied. show access - lists will not show you which interfaces have an access list applied.
Correct Answer: debug ip nat
Explanation:
The command debug ip nat will show you in real time the translations occurring on your router.
Correct Answer: ip nat pool Todd 171.16.10.65 171.16.10.94 net 255.255.255.224
Explanation:
The command ip nat pool name creates the pool that hosts can use to get onto the global internet. What makes option B correct is that the range 171.16.10.65 through 171.16.10.94 includes 30 hosts, but the mask has to match 30 hosts as well, and that mask is 255.255.255.224 . Option C is wrong because there is a lowercase t in the pool name. Pool name are case sensitive.
Correct Answer: prefix - length
Explanation:
Instead of the netmask command, you can use the prefix-length length statement.
Correct Answer: Inside global
Explanation:
An inside global address is considered to be the IP address of the host on the private network after translation.
Correct Answer: show access - list
Explanation:
Once you create your pool, the command ip nat inside source must be used to say which inside locals are allowed to use the pool. In this question we need to see if access - list 100 is configured correctly, if at all , so show access - list is the best answer.
Comments
There are no comments.Programming
Copyright ©CuriousTab. All rights reserved.