Cisco 640-554 Online Practice Questions and Exam Preparation

Cisco 640-554 Online Questions & Answers

• Question 261:

  How can you prevent clientless SSL VPN users from accessing any HTTP or HTTPS URL within the portal?

  A. Configure a web ACL.
  B. Turn off URL entry.
  C. Configure a smart tunnel.
  D. Configure a portal access rule.
  B. Turn off URL entry.

• Question 262:

  Which characteristic is the foundation of Cisco Self-Defending Network technology?

  A. secure connectivity
  B. threat control and containment
  C. policy management
  D. secure network platform
  D. secure network platform

  ---

  http://www.cisco.com/en/US/solutions/ns170/networking_solutions_products_genericcontent0900aecd8051f378.html Create a Stronger Defense Against Threats Each day, you reinvent how you conduct business by adopting Internet-based business models. But Internet connectivity without appropriate security can compromise the gains you hope to make. In today's connected environment, outbreaks spread globally in a matter of minutes, which means your security systems must react instantly. Maintaining security using tactical, point solutions introduces complexity and inconsistency, but integrating security throughout the network protects the information that resides on it. Three components are critical to effective information security: ?A secure network platform with integrated security to which you can easily add advanced security technologies and services ?Threat control services focused on antivirus protection and policy enforcement that continuously monitor network activity and prevent or mitigate problems ?Secure communication services that maintain the privacy and confidentiality of sensitive data, voice, video, and wireless communications while cost-effectively extending the reach of your network

• Question 263:

  Which option provides the most secure method to deliver alerts on an IPS?

  A. IME
  B. CSM
  C. SDEE
  D. syslog
  C. SDEE

• Question 264:

  What is the function of an IPS signature?

  A. It determines the best course of action to mitigate a threat.
  B. It detects network intrusions by matching specified criteria.
  C. It provides logging data for allowed connections.
  D. It provides threat-avoidance controls.
  B. It detects network intrusions by matching specified criteria.

• Question 265:

  Which three items are Cisco best-practice recommendations for securing a network? (Choose three.)

  A. Routinely apply patches to operating systems and applications.
  B. Disable unneeded services and ports on hosts.
  C. Deploy HIPS software on all end-user workstations.
  D. Require strong passwords, and enable password expiration.
  A. Routinely apply patches to operating systems and applications.
  B. Disable unneeded services and ports on hosts.
  D. Require strong passwords, and enable password expiration.

  ---

  Disable Unused Services

  As a security best practice, any unnecessary service must be disabled. These unneeded services, especially those that use User Datagram Protocol (UDP), are infrequently used for legitimate purposes, but can be used in order to launch

  DoS and other attacks that are otherwise prevented by packet filtering.

  The TCP and UDP small services must be disabled. These services include:

  echo (port number 7)

  discard (port number 9)

  daytime (port number 13)

  chargen (port number 19)

  It is also recommended to routinely apply patches to fix bugs and other vulnerabilities and to require strong passwords with password expiration Reference: Cisco Guide to Harden Cisco IOS Devices

  http://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html

• Question 266:

  What is the default timeout interval during which a router waits for responses from a TACACS server before declaring a timeout failure?

  A. 5 seconds
  B. 10 seconds
  C. 15 seconds
  D. 20 seconds
  A. 5 seconds

  ---

  Reference: http://www.cisco.com/c/en/us/td/docs/routers/connectedgrid/cgr1000/1_0/software/ configuration/guide/security/security_Book/sec_tacacspl_cgr1000.html

• Question 267:

  In which type of Layer 2 attack does an attacker broadcast BDPUs with a lower switch priority?

  A. MAC spoofing attack
  B. CAM overflow attack
  C. VLAN hopping attack
  D. STP attack
  D. STP attack

  ---

  http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11_605972.html

  Introduction The purpose of this paper is to identify how easily the Spanning-Tree Protocol (STP) can be compromised to allow eavesdropping in a switched corporate environment and how to mitigate this vulnerability using L2 security features that are available on the Cisco?Catalyst?6500. The Spanning Tree Protocol (STP) Man in The Middle (MiTM) attack compromises the STP "Root Bridge" election process and allows a hacker to use their PC to masquerade as a "Root Bridge," thus controlling the flow of L2 traffic. In order to understand the attack, the reader must have a basic understanding of the "Root Bridge" Election process and the initial STP operations that build the loop free topology. Therefore, the first section of this document, Overview of the STP Root Bridge Election Process, will be devoted to providing a simplified explanation of 802.1d STP operations as it pertains to understanding the STP MiTM attack. If you require a more comprehensive overview of STP, please review the LAN Switching Chapter of the Cisco Catalyst 6500 Configuration Guide on Cisco.com.

• Question 268:

  DRAG DROP

  Select and Place:

  

  

• Question 269:

  Which command is needed to enable SSH support on a Cisco Router?

  A. crypto key lock rsa
  B. crypto key generate rsa
  C. crypto key zeroize rsa
  D. crypto key unlock rsa
  B. crypto key generate rsa

• Question 270:

  Refer to the exhibit.

  

  Which statement about this output is true?

  A. The user logged into the router with the incorrect username and password.
  B. The login failed because there was no default enable password.
  C. The login failed because the password entered was incorrect.
  D. The user logged in and was given privilege level 15.
  C. The login failed because the password entered was incorrect.

  ---

  http://www.cisco.com/en/US/docs/ios/12_2/debug/command/reference/dbfaaa.html

  debug aaa authentication To display information on AAA/Terminal Access Controller Access Control System Plus (TACACS+) authentication, use the debug aaa authentication privileged EXEC command. To disable debugging command, use the no form of the command. debug aaa authentication no debug aaa authentication The following is sample output from the debug aaa authentication command. A single EXEC login that uses the "default" method list and the first method, TACACS +, is displayed. The TACACS+ server sends a GETUSER request to prompt for the username and then a GETPASS request to prompt for the password, and finally a PASS response to indicate a successful login. The number 50996740 is the session ID, which is unique for each authentication. Use this ID number to distinguish between different authentications if several are occurring concurrently. Router# debug aaa authentication

  6:50:12:

  AAA/AUTHEN: create_user user='' ruser='' port='tty19' rem_addr='172.31.60.15' authen_type=1 service=1 priv=1

  6:50:12:

  AAA/AUTHEN/START (0): port='tty19' list='' action=LOGIN service=LOGIN

  6:50:12:

  AAA/AUTHEN/START (0): using "default" list

  6:50:12:

  AAA/AUTHEN/START (50996740): Method=TACACS+

  6:50:12:

  TAC+ (50996740): received authen response status = GETUSER

  6:50:12:

  AAA/AUTHEN (50996740): status = GETUSER

  6:50:15:

  AAA/AUTHEN/CONT (50996740): continue_login

  6:50:15:

  AAA/AUTHEN (50996740): status = GETUSER

  6:50:15:

  AAA/AUTHEN (50996740): Method=TACACS+

  6:50:15:

  TAC+: send AUTHEN/CONT packet

  6:50:15:

  TAC+ (50996740): received authen response status = GETPASS

  6:50:15:

  AAA/AUTHEN (50996740): status = GETPASS

  6:50:20:

  AAA/AUTHEN/CONT (50996740): continue_login

  6:50:20:

  AAA/AUTHEN (50996740): status = GETPASS

  6:50:20:

  AAA/AUTHEN (50996740): Method=TACACS+

  6:50:20:

  TAC+: send AUTHEN/CONT packet

  6:50:20:

  TAC+ (50996740): received authen response status = PASS

  6:50:20:

  AAA/AUTHEN (50996740): status = PASS