Implementing Cisco IOS Network Security (IINS v2.0) (640-554) Free Practice Test

Question 1

What is the purpose of a trunk port?

A. A trunk port provides a physical link specifically for a VPN.

B. A trunk port connects multiple hubs together to increase bandwidth.

C. A trunk port carries traffic for multiple VLANs.

D. A trunk port separates VLAN broadcast domains.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

What is the first command you enter to configure AAA on a new Cisco router?

A. no aaa new-model

B. no aaa-configuration

C. aaa configuration

D. aaa new-model

Correct Answer: D

Question 3

Which type of Cisco ASA access list entry can be configured to match multiple entries in a single statement?

A. object groups

B. class-map

C. nested object-class

D. extended wildcard matching

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

For what purpose is the Cisco ASA appliance web launch SSL VPN feature used?

A. to enable split tunneling when using clientless SSL VPN access

B. to enable single-sign-on so the SSL VPN users need only log in once

C. to optimize the SSL VPN connections using DTLS

D. to enable smart tunnel access for applications that are not web-based

E. to enable users to login to a web portal to download and launch the AnyConnect client

Correct Answer: E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

What Cisco Security Agent Interceptor is in charge of intercepting all read/write requests to the rc files in UNIX?

A. Configuration interceptor

B. File system interceptor

C. Execution space interceptor

D. Network interceptor

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Which two options represent a threat to the physical installation of an enterprise network? (Choose two.)

A. security guards

B. electrical power

C. computer room access

D. surveillance camera

E. change control

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Which four types of VPN are supported using Cisco ISRs and Cisco ASA appliances? (Choose four.)

A. SSL full-tunnel client remote-access VPNs

B. IPsec clientless remote-access VPNs

C. IPsec site-to-site VPNs

D. SSL site-to-site VPNs

E. IPsec client remote-access VPNs

F. SSL clientless remote-access VPNs

Correct Answer: A,C,E,F

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which type of management reporting is defined by separating management traffic from production traffic?

A. SSH

B. IPsec encrypted

C. in-band

D. out-of-band

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which command configures stateful packet inspection to inspect a packet after it passes the inbound ACL of the input interface?

A. ip inspect name audit-trail off

B. ip inspect out

C. ip inspect in

D. ip inspect name audit-trail on

Correct Answer: C

Question 10

Which security zone is automatically defined by the system?

A. The destination zone

B. The self zone

C. The source zone

D. The inside zone

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cisco Implementing Cisco IOS Network Security (IINS v2.0) (640-554) Free Practice Test