Cisco 640-554 Online Practice Questions and Exam Preparation

Cisco 640-554 Online Questions & Answers

• Question 11:

  Where is the transform set applied in an IOS IPsec VPN?

  A. on the WAN interface
  B. in the ISAKMP policy
  C. in the crypto map
  D. on the LAN interface
  C. in the crypto map

• Question 12:

  Refer to the exhibit.

  

  Which switch is designated as the root bridge in this topology?

  A. It depends on which switch came on line first.
  B. Neither switch would assume the role of root bridge because they have the same default priority.
  C. switch X
  D. switch Y
  C. switch X

  ---

  http://www.cisco.com/en/US/tech/tk389/tk621/technologies_configuration_example09186a008009467c.shtml

  Rules of Operation

  This section lists rules for how STP works. When the switches first come up, they start the root switch selection process. Each switch transmits a BPDU to the directly connected switch on a per-VLAN basis.

  As the BPDU goes out through the network, each switch compares the BPDU that the switch sends to the BPDU that the switch receives from the neighbors. The switches then agree on which switch is the root switch. The switch with the

  lowest bridge ID in the network wins this election process.

• Question 13:

  What are three features of IPsec tunnel mode? (Choose three.)

  A. IPsec tunnel mode supports multicast.
  B. IPsec tunnel mode is used between gateways.
  C. IPsec tunnel mode is used between end stations.
  D. IPsec tunnel mode supports unicast traffic.
  E. IPsec tunnel mode encrypts only the payload.
  F. IPsec tunnel mode encrypts the entire packet.
  B. IPsec tunnel mode is used between gateways.
  D. IPsec tunnel mode supports unicast traffic.
  F. IPsec tunnel mode encrypts the entire packet.

• Question 14:

  By which kind of threat is the victim tricked into entering username and password information at a disguised website?

  A. phishing
  B. spam
  C. malware
  D. spoofing
  A. phishing

• Question 15:

  Which item is the great majority of software vulnerabilities that have been discovered?

  A. Stack vulnerabilities
  B. Heap overflows
  C. Software overflows
  D. Buffer overflows
  D. Buffer overflows

  ---

  A majority of software vulnerabilities that are discovered are buffer overflows. Reports suggest that two out of every three software vulnerabilities that are identified by the CERT team are buffer overflows. Reference: Implementing Cisco IOS Network Security (IINS 640-554) Foundation Learning Guide, By Catherine Paquet

• Question 16:

  Which three protocols are supported by management plane protection? (Choose three.)

  A. SNMP
  B. SMTP
  C. SSH
  D. OSPF
  E. HTTPS
  F. EIGRP
  A. SNMP
  C. SSH
  E. HTTPS

• Question 17:

  Which three statements about TACACS+ are true? (Choose three.)

  A. TACACS+ uses TCP port 49.
  B. TACACS+ uses UDP ports 1645 and 1812.
  C. TACACS+ encrypts the entire packet.
  D. TACACS+ encrypts only the password in the Access-Request packet.
  E. TACACS+ is a Cisco proprietary technology.
  F. TACACS+ is an open standard.
  A. TACACS+ uses TCP port 49.
  C. TACACS+ encrypts the entire packet.
  E. TACACS+ is a Cisco proprietary technology.

  ---

  TACACS is defined in RFC 1492, and uses (either TCP or UDP) port 49 by default. Since TCP is connection oriented protocol, TACACS+ does not have to implement transmission control. RADIUS, however, does have to detect and correct transmission errors like packet loss, timeout etc. since it rides on UDP which is connectionless. RADIUS encrypts only the users' password as it travels from the RADIUS client to RADIUS server. All other information such as the username, authorization, and accounting are transmitted in clear text. Therefore it is vulnerable to different types of attacks. TACACS+ encrypts all the information mentioned above and therefore does not have the vulnerabilities present in the RADIUS protocol. Terminal Access Controller Access-Control System Plus (TACACS+) is a protocol developed by Cisco and released as an open standard beginning in 1993. Although derived from TACACS, TACACS+ is a separate protocol that handles authentication, authorization, and accounting (AAA) services. TACACS+ and other flexible AAA protocols have largely replaced their predecessors. Reference: http://en.wikipedia.org/wiki/TACACS

• Question 18:

  Which element must you configure to allow traffic to flow from one security zone to another?

  A. a zone pair
  B. a site-to-site VPN
  C. a zone list
  D. a zone-based policy
  A. a zone pair

• Question 19:

  Which two pieces of information should you acquire before you troubleshoot an STP loop? (Choose two.)

  A. topology of the routed network
  B. topology of the switched network
  C. location of the root bridge
  D. number of switches in the network
  B. topology of the switched network
  C. location of the root bridge

  ---

  Forwarding loops vary greatly both in their origin (cause) and effect. Due to the wide variety of issues that can affect STP, this document can only provide general guidelines about how to troubleshoot forwarding loops.

  Before you start to troubleshoot, you must obtain this information:

  An actual topology diagram that details all of the switches and bridges

  Their corresponding (interconnecting) port numbers

  STP configuration details, such as which switch is the root and backup root, which links have a non-default cost or priority, and the location of blocking ports Reference: http://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-treeprotocol/28943-170.html

• Question 20:

  DRAG DROP

  Select and Place: