CCSP Cisco Secure PIX Firewall Advanced Exam Certification Guide, Second Edition [Electronic resources]

Greg Bastien; Earl Carter; Christian Degu

نسخه متنی -صفحه : 191/ 87
نمايش فراداده

  • "Do I Know This Already?" Quiz

    The purpose of the "Do I Know This Already?" quiz is to help you decide if you really need to read the entire chapter. If you already intend to read the entire chapter, you do not necessarily need to answer these questions now.

    The ten-question quiz, derived from the major sections in the "Foundation and Supplemental Topics" portion of the chapter, helps you determine how to spend your limited study time.

    1.

    What is the Easy VPN Server functionality known as Initial Contact?

    1. Ability to cause the Easy VPN Server to delete any existing connections, thus preventing SA synchronization problems

    2. The first connection between an Easy VPN Client and Easy VPN Server

    3. The initial message sent from the Easy VPN Server to the Easy VPN Client

    4. The initial message sent from the Easy VPN Client to the Easy VPN Server

    5. None of the above

    2.

    Which of the following platforms does not support the Easy VPN Remote feature functionality?

    1. 800 Series routers

    2. 900 Series routers

    3. 7200 Series routers

    4. 1700 Series routers

    5. None of the above

    3.

    Which two IKE authentication mechanisms do the Easy VPN Remote Clients support? (Choose two.)

    1. Username/password

    2. Preshared keys

    3. Diffie-Hellman

    4. Digital certificates

    5. XAUTH

    4.

    How many different operation modes does the Easy VPN Remote feature support?

    1. 1

    2. 4

    3. 2

    4. 3

    5. None of the above

    5.

    In which Easy VPN Remote mode are the IP addresses of the remote systems visible on the Easy VPN Server network?

    1. Client mode

    2. Network extension mode

    3. Server mode

    4. No Easy VPN Remote modes support this functionality.

    5. All Easy VPN Remote modes

    6.

    The Cisco VPN Software Client supports which key management techniques?

    1. IKE main mode

    2. IKE aggressive mode

    3. Diffie-Hellman groups 1, 2, 5, and 7

    4. Answers a and b

    5. Answers a, b, and c

    7.

    What is Secure Unit Authentication (SUA)?

    1. The ability to require the hosts on the remote protected network to be authenticated individually based on the IP address of the inside host

    2. The ability to require one-time passwords, two-factor authentication, and similar authentication schemes before the establishment of a VPN tunnel to the Easy VPN Server

    3. An authentication mechanism between the remote systems and the Easy VPN Remote Client

    4. An authentication mechanism that the Cisco VPN Software Client uses to connect with the Easy VPN Remote feature

    5. None of the above

    8.

    Which authentication mechanisms are supported with PPPoE?

    1. PAP

    2. CHAP

    3. MS-CHAP

    4. Answers a and b

    5. Answers a, b, and c

    9.

    Which command enables the PIX Firewall to pass configuration parameters learned from a DHCP server to its DHCP clients?

    1. dhcpd auto_config

    2. dhcpd option 150

    3. dhcpd address

    4. dhcpd bind

    5. None of the above

    10.

    Which of the following is false with regard to the PIX Firewall?

    1. You can pass configuration parameters learned from the DHCP client to the PIX''''s DHCP clients.

    2. You can pass configuration parameters learned from the PPPoE client to the PIX''''s DHCP clients.

    3. You can enable the DHCP client and the DHCP server simultaneously.

    4. You can enable the PPPoE client and the DHCP client on the same interface simultaneously.

    5. All of the statements are true.

    The answers to the "Do I Know This Already?" quiz are found in Appendix A, "Answers to the ''''Do I Know This Already?'''' Quizzes and Q&A Sections." The suggested choices for your next step are as follows: