stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
CCNA 3 v7 Module 8 Review Flashcards | StudBud
Explore
/
CCNA 3 v7 Module 8 Review
CCNA 3 v7 Module 8 Review
25 terms
·
StudBud Administration
·
19 plays
Imported from external platform
Flashcards
25 cards
F
Practice quiz
P
Host live
L
Questions
25
Answers
1
What are two tasks to perform when configuring static NAT? (Choose two.)
Create a mapping between the inside local and outside local addresses.
Define the outside global address.
Identify the participating interfaces as inside or outside interfaces.
Configure a NAT pool.
2
Refer to the exhibit. With Static NAT PC 1 accesses the web server on the internal ntwrk. What 2 addresses are needed
B = 209.165.201.7
B = 10.0.254.5
A = 209.165.201.2
B = 209.165.201.1
A = 10.1.0.13
3
Which two stmts describe an advantage or a disadvantage when deploying NAT for IPv4 in a network? (choose 2)
NAT provides a solution to slow down the IPv4 address depletion.
NAT is a prblm for some applications that require end-to-end connectivity
NAT causes routing tables to include more information.
NAT will impact negatively on switch performance.
4
Which VPN solution allows the use of a web browser to establish a secure, remote-access VPN tunnel to the ASA?
clientless SSL
site-to-site using a preshared key
site-to-site using an ACL
client-based SSL
5
Which IPsec security function provides assurance that the data received via a VPN has not been modified in transit?
authentication
confidentiality
secure key exchange
integrity
6
Refer to the exhibit. Based on the output that is shown, what type of NAT has been implemented?
static NAT with a NAT pool
static NAT with one entry
dynamic NAT with a pool of two public IP addresses
PAT using an external interface
7
Refer to the exhibit. From the perspective of users behind the NAT router, what type of NAT address is 209.165.201.1?
outside global
inside local
outside local
inside global
8
Refer to the exhibit. From the perspective of R1, the NAT router, which address is the inside global address?
192.168.0.10
209.165.200.254
209.165.200.225
192.168.0.1
9
How is “tunneling” accomplished in a VPN?
Pkts disguised to look like other traffic to be ignored
A DC is established between the src & destination devices for the duration
New headers from one or more VPN protocols encapsulate the original packets
All packets btwn 2 hosts assigned 2 a single medium to ensure privacy
10
Which two WAN infrastructure services are examples of private connections?
Frame Relay / T1/E1
DSL / Frame Relay
wireless / cable
Cable T1/E1
11
Which network scenario will require the use of a WAN?
Employee workstations need to obtain dynamically assigned IP addresses.
To access web pages that are hosted on the corp web servers in the DMZ with
Share files with the HQ office located in a separate building on the same
Employees need to connect to corp email server thru a VPN when traveling.
12
Which is a requirement of a site-to-site VPN?
Requires the placement of a VPN server at the edge of the company network.
Requires a VPN gateway at each end to encrypt and decrypt traffic.
It requires hosts to use VPN client software to encapsulate traffic.
It requires a client/server architecture.
13
Which two technologies are categorized as private WAN infrastructures? (Choose two.)
FrameRelay and MetroE
VPN and DSL
DSL and FrameRelay
VPN and MetroE
14
What is a disadvantage of NAT?
Internal hosts use a single public IPv4 address for external communication
The router does not need to alter the checksum of the IPv4 packets.
There is no end-to-end addressing.
The costs of readdressing can be costly for a publicly addressed network.
15
Which situation describes data transmissions over a WAN connection?
Sends an email to all in the Dept w/offices located in several bldgs.
prints a file on a networked printer that is located in another building.
A Ntwrk Admin remotely accesses a web server that is located in the dat
An employee shares a DB file with a co-worker located another branch office
16
Which type of VPN uses the public key infrastructure and digital certificates?
IPsec virtual tunnel interface
GRE over IPsec
dynamic multipoint VPN
SSL VPN
17
Which statement describes an important characteristic of a site-to-site VPN?
It must be statically set up.
It is ideally suited for use by mobile workers.
It requires using a VPN client on the host PC.
When Initial connection is made it can dynamically change connection info.
18
Given the commands as shown, how many hosts on the internal LAN off R1 can have simultaneous NAT translations on R1?
255
244
1
10
19
What is the function of the Diffie-Hellman algorithm within the IPsec framework?
guarantees message integrity
provides strong data encryption
allows peers to exchange shared keys
provides authentication
20
A network admin wants to examine the active NAT translations on a border router. Which command would perform the task?
Router# show ip nat translations
Router# show ip nat statistics
Router# clear ip nat translations
Router# debug ip nat translations
21
What are two hashing algorithms used with IPsec AH to guarantee authenticity?
SHA/AES
SHA/RSA
SHA/DH
SHA/MD5
22
Refer to the exhibit. A Network Admin configured NAT and is verifying the configuration. What can he verify?
Two types of NAT are enabled and working with ACL 1 being used.
One port on the router is not participating in the address translation.
The name of the NAT pool is refCount.
Three addresses from the NAT pool are being used by hosts.
23
What two algorithms can be part of an IPsec policy to provide encryption and hashing to protect interesting traffic?
RSA/DH
PSK/DH
SHA/RSA
SHA/AES
24
Refer to the exhibit. web server. What IPv4 address is the source IP ad
192.168.1.5
172.16.1.254
172.16.1.10
209.165.200.245
203.0.113.10
192.0.2.2
25
What does NAT overloading use to track multiple internal hosts that use one inside global address?
autonomous system numbers
port numbers
IP addresses
MAC addresses
