Cisco 640-554 Online Practice Questions and Exam Preparation

Cisco 640-554 Online Questions & Answers

• Question 231:

  Which three statements about RADIUS are true? (Choose three.)

  A. RADIUS uses TCP port 49.
  B. RADIUS uses UDP ports 1645 or 1812.
  C. RADIUS encrypts the entire packet.
  D. RADIUS encrypts only the password in the Access-Request packet.
  E. RADIUS is a Cisco proprietary technology.
  F. RADIUS is an open standard.
  B. RADIUS uses UDP ports 1645 or 1812.
  D. RADIUS encrypts only the password in the Access-Request packet.
  F. RADIUS is an open standard.

• Question 232:

  Which monitoring protocol uses TCP port 1470 or UDP port 514?

  A. RELP
  B. Syslog
  C. SDEE
  D. IMAP
  E. SNMP
  F. CSM
  B. Syslog

• Question 233:

  DRAG DROP

  Select and Place:

  

  

• Question 234:

  What is the default privilege level for a new user account on a Cisco ASA firewall?

  B. 1
  C. 2
  D. 15
  C. 2

• Question 235:

  Which statement about disabled signatures when using Cisco IOS IPS is true?

  A. They do not take any actions, but do produce alerts.
  B. They are not scanned or processed.
  C. They still consume router resources.
  D. They are considered to be "retired" signatures.
  C. They still consume router resources.

  ---

  Disabled means that the signature does not produce an alert but is compiled into memory and inspection takes place. There are advantages of having signatures disabled, such as allowing the customer to quickly enable the signature without waiting for it to be loaded into memory and for inspection to take place.

• Question 236:

  Which two statements about IPv6 access lists are true? (Choose two).

  A. IPv6 access lists support numbered access lists.
  B. IPv6 access lists support wildcard masks.
  C. IPv6 access lists support standard access lists.
  D. IPv6 access lists support named access lists.
  E. IPv6 access lists support extended access lists.
  D. IPv6 access lists support named access lists.
  E. IPv6 access lists support extended access lists.

  ---

  Here exists the first major difference we notice between IPv4 and IPv6 ACLs: IPv6 supports only extended ACLs. We cannot create a standard (source-only) IPv6 ACL. IPv6 also only supports named (versus numbered) ACLs.

  

  Reference: http://packetlife.net/blog/2010/jun/30/ipv6-access-lists-acl-ios/

• Question 237:

  Which two options represent a threat to the physical installation of an enterprise network? (Choose two.)

  A. surveillance camera
  B. security guards
  C. electrical power
  D. computer room access
  E. change control
  C. electrical power
  D. computer room access

  ---

  http://www.cisco.com/E-Learning/bulk/public/celc/CRS/media/targets/1_3_1.swf

• Question 238:

  Which action can you take to add bandwidth to a trunk between two switches and end up with only one logical interface?

  A. Configure another trunk link.
  B. Configure EtherChannel.
  C. Configure an access port.
  D. Connect a hub between the two switches.
  B. Configure EtherChannel.

• Question 239:

  Which Cisco feature can help mitigate spoofing attacks by verifying symmetry of the traffic path?

  A. Unidirectional Link Detection
  B. Unicast Reverse Path Forwarding
  C. TrustSec
  D. IP Source Guard
  B. Unicast Reverse Path Forwarding

• Question 240:

  Which protocols use encryption to protect the confidentiality of data transmitted between two parties? (Choose two.)

  A. FTP
  B. SSH
  C. Telnet
  D. AAA
  E. HTTPS
  F. HTTP
  B. SSH
  E. HTTPS