Question 1.1. An activist can best be described as which of the following?

An unskilled programmer that spreads malicious scripts

Consider themselves seekers of knowledge

Use DoS attacks on websites with which they disagree

Deface websites by leaving messages for their friends to read

Question 2.2. Which type of firewall policy calls for a firewall to deny all traffic by default?

Permissive policy

Perimeter policy

Restrictive policy

Demilitarized policy

Question 3.3.What is a program that appears to do something useful but is actually malware?

Virus

Logic bomb

Trojan

Back door

Question 4.4.In which form of authentication does the authenticating device generate a random code and send it to the user who wants to be authenticated?

Basic

Challenge/response

Biometrics

Signature

Question 5.5.Which type of attack works by an attacker operating between two computers in a network and impersonating one computer to intercept communications?

Malicious port scanning

Man-in-the-middle

Denial of service

Remote procedure call

Question 6.6.How large is the IPv6 address space?

32 bits

128 bits

64 bits

168 bits

Question 7.7.Which field in the IP header is an 8-bit value that identifies the maximum amount of time the packet can remain in the network before it is dropped?

TTL

Fragment Offset

ECN

Options

Question 8.8.Which protocol is responsible for automatic assignment of IP addresses?

DNS

DHCP

FTP

SNMP

Question 9.9.Which of the following is not an advantage of IPv6 versus IPv4?

Larger address space

Built-in security

Supports static configuration

NAT is unnecessary

Question 10.10.Which of the following is a valid IPv6 address?

5BA4:2391:0:0:4C3E

1080::8:800:200C:417A

24::5B1A::346C

5510:ABCD::34:1::2

Question 11.11.Which TCP flag can be the default response to a probe on a closed port?

RST

URG

PSH

SYN

Question 12.12.Which of the following is the description of a land attack?

The local host source address occurs in the packet.

Source and destination IP address/port are the same.

An illegal TCP flag is found in the segment header.

The attacker uses an undefined protocol number.

Question 13.13.What is the typical packet sequence for closing a TCP session?

FIN, FIN ACK, RST

FIN, ACK, FIN ACK, ACK

FIN ACK, FIN, ACK, RST

FIN, FIN ACK

Question 14.14.Which of the following is an element of the TCP header that can indicate that a connection has been established?

Flags

Stream index

SEQ/ACK analysis

Sequence number

Question 15.15.Of what category of attack is a DoS attack an example?

Bad header information

Single-packet attack

Multiple-packet attack

Suspicious data payload

Question 16.16.What uses mathematical calculations to compare routes based on some measurement of distance?

Route summarization

Link-state routing protocols

Routing metrics

Distance-vector routing protocols

Question 17.17.Which protocol that runs on Cisco routers shares information between Cisco devices?

CDP

TCP

bootp

SSH

Question 18.18.Which of the following is true about ACLs on Cisco routers?

There is an implicit deny any statement at the end of the ACL.

There is an explicit permit any statement at the beginning of the ACL.

ACLs are processed in reverse order so place high priority statements last.

ACLs bound to an interface apply to inbound and outbound traffic by default.

Question 19.19.Which of the following types of traffic does NOT travel through routers?

DNS zone transfers

ARP requests

SNMP status information

Network route information

Question 20.20.Which of the following types of passwords prevents a user from accessing privileged exec mode on a Cisco router?

Console

AUX

Enable

TTY