IOS Questions
Question 1
Your colleague asks you to encrypt all the passwords in his router and switch. What command will you use to complete this task?
A. Use the “service password-encryption” under privileged mode
B. Use the “service encryption” command under global configuration mode
C. Use the “service pasword-encryption” command under global configuration mode
D. Use the “no plain-text password” command under global configuration mode
E. Use the “no plain-text password” command under privileged mode.
Answer: C
Question 2
How can you protect your virtual terminal interfaces from remote threats?
A. Create an access list and apply it to the virtual terminal interfaces with the “access-group” command
B. Configure a warning message when someone access to the virtual terminal interfaces
C. Shut down that interface
D. Create a password for the virtual terminal interfaces
E. Create an access list and apply it to the virtual terminal interfaces with the “access-class” command
Answer: D E
Explanation
It is a waste to administratively shut down the interface. Moreover, someone can still access the virtual terminal interfaces via other interfaces -> C is not correct.
…
To apply an access list to a virtual terminal interface we must use the “access-class” command. The “access-group” command is only used to apply an access list to a physical interface -> A is not correct; E is correct.
The most simple way to secure the virtual terminal interface is to configure a username & password to prevent unauthorized login -> D is correct.
Question 3
<cannot re-create this question>
Question 4
What does the “service password encryption” command do? (Choose two)
A. It encrypts all packets sent through this device
B. It encrypts all passwords in plain text in the configuration file
C. It prompts users enter the pasword when logging in
D. It encrypts all the routing updates sent from this device
E. All current and future passwords will be encrypted
Answer: B E
Explanation
By using this command, all the (current and future) passwords are encrypted. This command is primarily useful for keeping unauthorized individuals from viewing your password in your configuration file.
Question 5 (+ Question 11)
Which of the following statement describe a global command?
A. A command entered in any mode
B. A command that can be used in all versions
C. A command that is commonly used among vendors
E. A command which affects entire router
Answer: E
Explanation
A global command is a command in this form:
Device(config)#
This mode can affect the entire router/switch.
For more information about modes in Cisco devices, please read my Cisco Command Line Interface CLI tutorial.
Question 6
The output below is taken from a router
| line vty 0 15 password 7 424545345435235 login transport input ssh |
With this configuration, which of the following statements is correct?
A. Both telnet and SSH connections are allowed to the virtual terminal interfaces
B. Users must enter “424545345435235” to login to virtual terminal interfaces
C. Block the virtual terminal interfaces after seven failed login attempts
D. SSH protocol must be used for incoming traffic to the virtual terminal interfaces
Answer: D
Question 7
Your LAN connectivity is having problems. As a network administrator, which commands should you use to troubleshoot the problems on your router? (Choose three)
A. ping
B. netstat
C. ipconfig
D. ipcfg
E. show ip route
F. show interfaces
Answer: A E F
Explanation
The ping command can be used to test if the local device can reach a specific destination -> A is correct.
“tracert” is not a valid command in Cisco IOS commands, the correct command should be “traceroute” -> B is not correct.
The ipconfig command is not a valid command in Cisco IOS too -> C is not correct.
The “show ip route” command can be used to view the routing table of the router. It is a very useful command to find out many connectivity problems (like directly connected networks, learned network via routing protocols…) -> D is correct.
“winipcfg” is an old tool in Windows 95/98 to view IP settings of the installed network interfaces. But it is not a valid command in Cisco IOS commands -> E is not correct.
The “show interfaces” command is used to check all the interfaces on the local device only. It has very limited information to trouble LAN connectivity problem but it is the most reasonable to choose -> F is acceptable.
Question 8
What commands can be used to check active Telnet connections to your device?
A. show users
B. show sessions
C. show process
D. show cdp neighbors
E. show login
Answer: B
Question 9
Which global command that helps you view directly connected devices?
A. cdp on
B. cdp global
C. cdp run
D. cdp detail
Answer: C
Question 10
Which command will allow only one Telnet connection to the device?
A.
line vty 0 4
login
password tut
B.
line vty 0
login
password tut
C.
line vty 0 4
password single-telnet
D.
line vty 0 4
login
password single-telnet
Answer: B
Explanation
By using the “service password-encryption” command, all the (current and future) passwords are encrypted.