EnsurepassQUESTION 81 Which of the following provides the features of route summarization, assignment of contiguous blocks of addresses, and combining routes for multiple classful networks into a single route?   A. classless interdomain routing B. route summarization C. supernetting D. private IP addressing   Correct Answer: A     QUESTION 82 Aggregate global IPv6 addresses begin with which bit pattern in the first 16-bit group?   A. 000/3 B. 001/3 Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 61 Refer to the exhibit. Which statement best describes the problem?     A. Context vpn1 is not inservice. B. There is no gateway that is configured under context vpn1. C. The config has not been properly updated for context vpn1. D. The gateway that is configured under context vpn1 is not inservice.   Correct Answer: A     QUESTION 62 Which three statements are true about the transparent firewall mode in Cisco ASA? (Choose three.)   Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 51 Troubleshooting the web authentication fallback feature on a Cisco Catalyst switch shows that clients with the 802.1X supplicant are able to authenticate, but clients without the supplicant are not able to use web authentication. Which configuration option will correct this issue?   A. switch(config)# aaa accounting auth-proxy default start-stop group radius B. switch(config-if)# authentication host-mode multi-auth C. switch(config-if)# webauth D. switch(config)# Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 61 Refer to the exhibit. Which statement best describes the problem?     A. Context vpn1 is not inservice. B. There is no gateway that is configured under context vpn1. C. The config has not been properly updated for context vpn1. D. The gateway that is configured under context vpn1 is not inservice.   Correct Answer: A     QUESTION 62 Which three statements are true about the transparent firewall mode in Cisco ASA? (Choose three.)   Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 41 Which Cisco ASA feature can be used to update non-compliant antivirus/antispyware definition files on an AnyConnect client?   A. dynamic access policies B. dynamic access policies with Host Scan and advanced endpoint assessment C. Cisco Secure Desktop D. advanced endpoint assessment   Correct Answer: B         QUESTION 42 Refer to the exhibit. When configuring a Cisco IPS custom signature, what type of signature engine must you use Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 31 Which three security features were introduced with the SNMPv3 protocol? (Choose three.)   A. Message integrity, which ensures that a packet has not been tampered with in-transit B. DoS prevention, which ensures that the device cannot be impacted by SNMP buffer overflow C. Authentication, which ensures that the message is from a valid source D. Authorization, which allows access to certain data sections for certain authorized users E. Digital certificates, Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 21 DNSSEC was designed to overcome which security limitation of DNS?   A. DNS man-in-the-middle attacks B. DNS flood attacks C. DNS fragmentation attacks D. DNS hash attacks E. DNS replay attacks F. DNS violation attacks   Correct Answer: A     QUESTION 22 Which three statements are true about MACsec? (Choose three.)   A. It supports GCM modes of AES and 3DES. B. It is defined under IEEE 802.1AE. C. It provides hop-by-hop Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 11 Which two address translation types can map a group of private addresses to a smaller group of public addresses? (Choose two.)   A. static NAT B. dynamic NAT C. dynamic NAT with overloading D. PAT E. VAT   Correct Answer: CD     QUESTION 12 Which authentication mechanism is available to OSPFv3?   A. simple passwords B. MD5 C. null D. IKEv2 E. IPsec AH/ESP   Correct Answer: E             Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 1 In order to reassemble IP fragments into a complete IP datagram, which three IP header fields are referenced by the receiver? (Choose three.)   A. don't fragment flag B. packet is fragmented flag C. IP identification field D. more fragment flag E. number of fragments field F. fragment offset field   Correct Answer: CDF     QUESTION 2 Which VTP mode allows the Cisco Catalyst switch administrator to make changes to the VLAN configuration Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 111 Which of the following statements correctly describes the platform module slot evolution from pre- ISR through ISR to ISR G2?   A. All three platforms support WIC, VWIC, and VIC. B. NM and NME can be used in the ISR G2 via an adapter. NME-X is not supported on ISR G2. C. All three platforms support AIM. D. ISR and ISR G2 support PVDM2; no adapter is required in ISR G2.   Correct Answer: B     QUESTION 112 Which two configurations are performed Read more [...]
Posted in Uncategorized.
EnsurepassQUESTION 101 Which statement about scalability in Cisco OTV is true?   A. Unknown unicasts are handled by the authoritative edge device. B. The control plane avoids flooding by exchanging MAC reachability. C. Any encapsulation overhead is avoided by using IS-IS. D. IP-based functionality provides Layer 3 extension over any transport.   Correct Answer: B Explanation: http://www.cisco.com/en/US/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI_1.html#wp1185792 Read more [...]
Posted in Uncategorized.