1.Which wildcard mask would match the host range for the subnet 192.16.5.32 /27?0.0.0.320.0.0.630.0.63.2550.0.0.31

Scoring Rule For: correctness of response

2 points for Option 40 points for any other option2.Refer to the exhibit. The new security policy for the company allows all IP traffic from the Engineering LAthe Internet while only web traffic from the Marketing LAN is allowed to the Internet. Which ACL can beapplied in the outbound direction of Serial 0/1 on the Marketing router to implement the new security polic

access-list 197 permit ip 192.0.2.0 0.0.0.255 any

access-list 197 permit ip 198.18.112.0 0.0.0.255 any eq wwwaccess-list 165 permit ip 192.0.2.0 0.0.0.255 any

access-list 165 permit tcp 198.18.112.0 0.0.0.255 any eq www

access-list 165 permit ip any anyaccess-list 137 permit ip 192.0.2.0 0.0.0.255 any

access-list 137 permit tcp 198.18.112.0 0.0.0.255 any eq www

access-list 89 permit 192.0.2.0 0.0.0.255 any

access-list 89 permit tcp 198.18.112.0 0.0.0.255 any eq wwwScoring Rule For: correctness of response

2 points for Option 30 points for any other option

Reset ViewReset View

qqqqqqqq

3.Refer to the exhibit. Hosts from 172.19.123.0 are not allowed access to 192.0.2.0 but should be able to accethe Internet. Which set of commands will create a standard ACL that will apply to traffic outbound on theShannon router interface Fa0/0 implementing this security?

access-list 142 deny ip 172.19.123.0 0.0.0.255 192.0.2.0 0.0.0.255access-list 142 permit ip any anyaccess-list 56 deny 172.19.123.0 0.0.0.255access-list 56 permit anyaccess-list 61 deny 172.19.123.0 0.0.0.0access-list 61 permit anyaccess-list 87 deny 192.0.2.0 0.0.0.255access-list 87 permit anyScoring Rule For: correctness of response

2 points for Option 20 points for any other option4.Refer to the exhibit. An administrator notes a significant increase in the amount of traffic that is entering thenetwork from the ISP. The administrator clears the counters. After a few minutes, the administrator again chthe access-list table. What can be concluded from the output that is shown?A small amount of HTTP traffic is an indication that the web server was not configured correctly.

Reset View

qqqqq

A larger amount of POP3 traffic, compared with SMTP traffic, indicates that there are more POP3 e-mailclients than SMTP clients in the enterprise.A large amount of ICMP traffic is being denied at the interface, which can be an indication of a DoS attaA larger amount of e-mail traffic, compared with web traffic, is an indication that attackers mainly targetthe e-mail server.

Scoring Rule For: correctness of response

2 points for Option 30 points for any other option5.Refer to the exhibit. A network administrator needs to add the command

deny ip 10.0.0.0 0.255.255.255 an

to R3. After adding the command, the administrator verifies the change using the

show access-list

commanWhat sequence number does the new entry have?010, and all other items are shifted down to the next sequence number 5060

Scoring Rule For: correctness of response

2 points for Option 40 points for any other option6.A security administrator wants to secure password exchanges on the vty lines on all routers in the enterpriseWhat option should be implemented to ensure that passwords are not sent in clear text across the publicnetwork?Use Telnet with an authentication server to ensure effective authentication.Apply an access list on the router interfaces to allow only authorized computers.Apply an access list on the vty line to allow only authorized computers.Use only Secure Shell (SSH) on the vty lines.

Reset ViewReset ViewReset View

qqqqqqqqqqq