|
Question 1.
Which two statements about the /etc/named.conf file are true? (Choose two)
A. It allows nslookup to resolve queries.
B. It informs a secondary server of the address of the primary.
C. It configures a primary with the addresses of secondary servers.
D. It informs in.named which zones it supports as a primary or secondary.
Answer: B, D
Explanation:
/etc/named.conf is the configuration file for the in.named daemon that manages BIND 8. This file contains such information as primary name server configuration including its IP address, and which zones in.named should support as primary or secondary.
Incorrect Answers:
A: This file does not interact directly with nslookup to resolve queries.
C: Secondary name servers are informed of the IP address of the primary.
Question 2.
Which is a legal reverse zone?
A. in-addr.arpa.gvon.com
B. 85.168.194.in-addr.arpa
C. 85.168.194.arpa.in-addr
D. 85.168.194.in-addr.arpa.net
Answer: B
Explanation:
The format of a reverse zone is the IP address in reverse followed by a dot (.) followed by in-addr.arpa.
Incorrect Answers:
A: There is nothing (no domain name) that follows in-addr.arpa.
C: arpa is after in-addr, not before it.
D: There is nothing (no domain name) that follows in-addr.arpa.
Question 3.
In the five-layer TCP/IP model, which protocol is part of the same layer as TCP?
A. IP
B. ARP
C. UDP
D. PPP
E. ICMP
Answer: C
Explanation:
TCP and UDP are Transport protocols that reside at the Transport layer of the fivelayer TCP/IP model.
Incorrect Answers:
A: IP resides at the Internet layer of the five-layer TCP/IP model.
B: ARP resides at the Application layer of the five-layer TCP/IP model
D: PPP resides at the Application layer of the five-layer TCP/IP model.
E: ICMP resides at the Internet layer of the five-layer TCP/IP model.
Question 4.
You are helping a junior network administrator configure and set up a tunnel, and need to ping the remote end of the tunnel to ensure the tunnel will work. Since the remote end of the tunnel can be pinged without a tunnel in place, the junior network administrator asks why a tunnel needs to be created.
What are two reasons to create a tunnel? (Choose two)
A. Tunneling ensures privacy of data through encryption.
B. Tunneling allows Ethernet packets to be encapsulated in IPv6 packets.
C. Tunneling allows for IPv6 datagrams to be routed within IPv4 datagrams.
D. Tunneling allows for IPv6 networks to be routed over IPv4 network infrastructure.
E. Tunneling results in faster routing because the router has fewer headers to inspect.
Answer: C, D
Explanation:
These answers are self explanatory. Tunneling allows IPv6 datagrams to be routed within IPv4 datagrams over IPv4 networks.
Incorrect Answers:
A: Tunneling ensures privacy through encapsulation.
B: The opposite is true.
E: Tunneling does not provide faster routing. If fact, in some case tunneling may cause routing to be slower.
Question 5.
You have configured an IPv6 router which is having problems routing correctly to a default router connected to the Internet. You need to investigate the machines routing table and check that the default route is in place. You also need to check the ARP cache to see whether the MAC address of the default router has been learned.
Which two commands enable you to perform these tasks? (Choose two)
A. arp -n
B. netstat -r
C. netstat -m
D. ifconfig -a
E. netstat -pn
Answer: B, E
Explanation:
You use netstat -r to examine the machine's routing table. You use netstat -pn to examine the ARP cache.
Incorrect Answers:
A: This command should be stated as arp -a -n, which displays the Net to Media table.
C: This command displays streams allocation.
D: This command shows the information for the currently configured network interfaces.
Question 6.
Which two are benefits of IPv6? (Choose two)
A. Faster ARP/RARP.
B. Smaller addresses.
C. More efficient routing.
D. Smaller routing tables.
E. Eliminates broadcast traffic.
Answer: C, E
Explanation:
More efficient IP routing and the elimination of broadcast traffic are among the many advantages IPv6 has over IPv4.
Incorrect Answers:
A: IPv6 has no effect on ARP/RARP request and response times.
B: IPv6 addresses have a large range than IPv4 addresses.
D: IPv6 has no effect on routing table size.
Question 7.
A Solaris router is correctly configured in terms of interfaces and addresses, but is refusing to forward inbound IP datagrams that arrive and travel up its stack to the Internet Layer. A network administrator discovers that the routers kernel is configured NOT to forward (route) IP datagrams.
Which command enables the router to forward and attempt to route IP datagrams?
A. ndd -set /dev/ip ip_ire_status
B. ndd -set /dev/ip ip_forwarding 1
C. ndd -set /dev/ip ip_forwarding 0
D. ndd -set /dev/tcp ip_forwarding 1
E. ndd -set /dev/tcp ip_forwarding 0
Answer: B
Explanation:
Setting the ip_forwarding parameter of the IP driver to 1 enables the router to forwardand attempt to route IP datagrams.
Incorrect Answers:
A: This is an invalid parameter for the IP driver.
C: Setting the ip_forwarding parameter to 0 disables the router from forwarding and routing IP
datagrams.
D: This is an invalid parameter for the TCP driver.
E: This is an invalid parameter for the TCP driver.
Question 8.
The traceroute command shows routing paths to a given destination. What protocols are used by this diagnostic tool?
A. TCP + IP
B. ICMP + IP
C. HTTP + IP
D. SNMP + IP
E. SNMP + TCP
Answer: B
Explanation:
The traceroute command uses Internet Connection Management Protocol (ICMP) over IP at the Internet layer of the five-layer TCP/IP model.
Incorrect Answers:
A: traceroute does not use TCP over IP.
C: traceroute does not use HTTP over IP.
D: traceroute does not use SNMP over IP.
E: traceroute does not use any protocol over TCP.
Question 9.
Which Class C networks are described by the CIDR routing table entry 204.108.16.0/23?
A. 204.108.16.0 only.
B. 204.108.15.0 to 204.108.16.0.
C. 204.108.16.0 to 204.108.17.0.
D. 204.108.16.0 to 204.108.19.0.
Answer: C
Explanation:
Converting the right-most 1 bit in the subnet mask to 0 allows the network address 204.108.16.0 and the next higher contiguous address 204.108.17.0 to be combined or 'supernetted.'
Incorrect Answers:
A: One network address is insufficient for supernetting.
B: 204.108.15.0 is an invalid address for supernetting 208.108.16.0.
D: These network addresses are not contiguous.
Question 10.
You have used the appropriate startup scrip in /etc/init.d to start the NTP daemon. However, the NTP daemon does not start up.
There is no error message.
What is the reason for this?
A. There is no configuration file.
B. rpcbind is not running on the machine.
C. The configuration file contains faulty entries.
D. The NTP daemon cannot contact an NTP server.
Answer: A
Explanation:
There must be a valid NTP configuration file named ntp.conf located in the /etc/inet directory in order for the xntpd daemon to start.
Incorrect Answers:
B: rpcbind has nothing to do with starting the NTP daemon.
C: If the configuration file existed and contained a faulty entry, an error message would appear.
D: The xntpd daemon must be running in order to contact an NTP server.
|
Plz send BSCI dump ...........advance thanx.........
|
Please help, I need the most current CCNA 640-801 dump
|
Question 1.
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. syslog community string
B. message.text
C. triggering packet copy
D. logging device ip
E. default ASA gateway
F. logging level
Answer: B, D, F
Question 2.
Exhibit:
You work as a network technician at ITCertKeys .com. Please study the exhibit carefully.
What does the inspect http HTTP_TRAFFIC command do in this policy map?
A. It adds HTTP traffic inspection to the OUTSIDE_POLICY policy map
B. It adds HTTP traffic limits to the OUTSIDE_POLICY policy map
C. It adds HTTP traffic inspection on TCP port 8080 to the OUTSIDE_POLICY policy map
D. It adds HTTP traffic inspection to the inspection-default global class map
Answer: A
Question 3.
An Administrator wants to protect a DMZ web server from SYN Flood attacks.
Which three of these commands, used individually would allow the administrator to place limits on the number of embryonic connections? (Choose three.)
A. http redirect
B. nat
C. http-proxy
D. static
E. set connection
F. access-list
Answer: B, D, E
Question 4.
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. triggering packet copy
B. message.text
C. syslog community string
D. logging level
E. default ASA gateway
F. logging device ip
Answer: B, D, F
Question 5.
Exhibit:
You work as a network technician at ITCertKeys .com. Please study the exhibit carefully. An administrator wants to permanently map host addresses on the DMZ subnet to the same host addresses, but a different subnet on the outside interface.
Which command or commands should the administrator use to accomplish this?
A. access-list server_map permit tcp any 192.168.1.0.0 255.255.255.0 nat(outside) 10 access-list
server_map global (dmz) 10 172.16.1.9-10 netmask 255.255.255.0
B. static (dmz,outside) 192.168.10.0 172.16.1.0 netmask 255.255.255.0
C. nat (dmz) 1 172.16.1.0 netmask 255.255.255.0 global (outside) 1 192.168.10.9-10 netmask
255.255.255.0
D. NAT (dmz) 0 172.16.1.0 netmask 255.255.255.0
Answer: C
Question 6.
Exhibit:
You work as a network technician at ITCertKeys .com. Please study the exhibit carefully.
This adaptive security appliance is configured for which two types of failover? (Choose two.)
A. Stateful Failover
B. LAN-Based Failover
C. Active/Standby Failover
D. Active/Active failover
E. Context/Group failover
F. Cable-based failover
Answer: B, D
Question 7.
Which these commands displays the status of the CSC SSM on the Cisco ASA?
A. show module 1 CSC details
B. show hw 1 details
C. show module 1 details
D. show interface GigabitEthernet 1/0
Answer: C
Question 8.
Which command both verifies that NAT is working properly and displays active NAT translations?
A. show nat translation
B. show running-configuration nat
C. show ip nat all
D. show xlate
Answer: D
Question 9.
The Cisco VPN Client supports which three of these tunneling protocols and methods? (Choose three.)
A. AH
B. LZS
C. IPSec over TCP
D. IPSec over UDP
E. SCEP
F. ESP
Answer: C, D, F
Question 10.
What does the nat 0 command do?
A. The nat 0 command, followed by an access list, specifies the addresses that are not to be
translated
B. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to
be translated using network address translations
C. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to
be translated when used for IPSec
D. The nat 0 command, followed by an access list, specifies the addresses that are to be used in
translations only once
Answer: A
Question 11.
What does the activation-key command in the Cisco ASA do?
A. Applies the activation key to the Cisco ASDM so the Cisco ASA can be managed using a web
interface
B. Applies the activation key to the Cisco ASA operating system, so that the Cisco ASA is
licensed and all features are available
C. Activates the SSM module in the Cisco ASA, providing intrusion protection and content filtering
D. Automatically activates the Cisco ASA, allowing it to be configured right out of the box
Answer: B
Question 12.
Which three of these are required in order to set up a CSC SSM on the Cisco ASA? (Choose three.)
A. The IP Address of the CSC interface
B. An SSL Certificate to user for HTTPS connections
C. An E-mail address for notifications
D. Activation codes
E. DNS names of critical hosts
F. IP Addresses of external routers
Answer: A, C, D
Question 13.
Which of these commands enables IKE on the outside interface?
A. isakmp enable outside
B. ike enable outside
C. nameif outside isakmp enable
D. int g0/0 ike enable (outbound)
Answer: A
Question 14.
The Cisco VPN Client supports which three of these tunneling protocols and methods? (Choose three.)
A. ESP
B. IPSec over UDP
C. LZS
D. SCEP
E. IPSec over TCP
F. AH
Answer: A, B, E
Question 15.
Which three of these are potential groups of users for WebVPN? (Choose three.)
A. Remote Employees that need daily access to the internet corporate network
B. Employees that only need occasional corporate access to a few applications
C. Employees accessing specific internal applications from desktops and laptops not managed by
IT
D. Administrators who need to manage servers and networking equipment
E. Users of a customer service kiosk placed in a retail store
F. Employees that need access to a wide range of corporate applications
Answer: B, C, E
Question 16.
Which of the following statements about the Configuration of WebVPN on the Cisco ASA is true for Cisco ASA version 7.2?
A. WebVPN and Cisco ASDM can't be enabled at the same time on the Cisco ASA
B. WebVPN and Cisco ASDM can only be enabled at the same time using the command line
interface
C. WebVPN and Cisco ASDM can't run on the same interface
D. WebVPN and Cisco ASDM can both be enabled on the same interface but must run on
different TCP ports
Answer: D
Question 17.
Which command configures the Cisco ASA console for SSH access by a local user?
A. ssh username sysadmin password cisco123
B. aaa authentication ssh console LOCAL
C. aaa authentication ssh LOCAL
D. ssh console username sysadmin password cisco123
Answer: B
Question 18.
SIMULATION
Network topology exhibit:
You work as a network engineer at ITCertKeys.com. You have installed a brand new ASA. You have configured it with factory-default, single mode. Your boss, Ms. ITCertKeys, has asked you to make further configurations.
More specifically, use host ITCertKeys A to:
* add two security appliance contexts and tx2.
* allocate appropriate interface to each context
* identify location from which the system downloads the context configuration
* the context named dminand will support interfaces GigabetEthernet0/0 and GigabitEthernet0/1
* the context named dminand must be stored in the ASA flash file admin.cfg
* the context named tx2 will support interfaces GigabetEthernet0/2 and GigabitEthernet0/3
* the context named tx2 must be stored in the ASA flash file ctx2.cfg
You are finished with the task after the contexts are created, interfaces allocated and context configuration file locations are configured in the ASA system context.
Answer:
Explanation:
ASA(config)#admin-context admin
ASA(config)#context admin
ASA(config-ctx)#allocate-interface gigabitethernet0/0
ASA(config-ctx)#allocate-interface gigabitethernet0/1
ASA(config-ctx)#config-url flash:/admin.cfg
ASA(config-ctx)#exit
ASA(config)#context tx2
ASA(config-ctx)#allocate-interface gigabitethernet0/2
ASA(config-ctx)#allocate-interface gigabitethernet0/3
ASA(config-ctx)#config-url flash:/ctx2.cfg
Question 19.
Which of these commands would block all SIP INVITE packets, such as calling-party and request-method from specific SIP EndPoints?
A. Use the match calling-party command in a class map. Apply the class map to a policy map that
contains the match request-methods command.
B. Group match commands in the global_polocy policy map
C. Group the match commands in a SIP inspection policy map
D. Group the match commands in a SIP inspection class map
Answer: D
Question 20.
Which three of these protocols can the content security and control module for the Cisco ASA be configured to scan? (Choose three.)
A. Telnet
B. SMTP
C. FTP
D. POP3
E. HTTPS
F. SSH
Answer: B, C, D
|
Need the latest dump ad plz thanks
|
Question 1.
A Citrix Access Gateway administrator at ITCertKeys.com creating logon points wants to enable pass-through authentication.
Which two authorization methods can be configured for pass-through authentication when configuring logon points? (Choose two.)
A. LDAP
B. RSA Security
C. Secure Computing
D. Active Directory
Answer: A, D
Question 2.
A Citrix Access Gateway administrator at ITCertKeys.com must take which two steps when creating a typical filter? (Choose two.)
A. Select endpoint analysis scan output in the filter.
B. Choose at least one condition to be included in the filter.
C. Provide a unique name for the filter.
D. Construct a logical expression for the filter.
E. Select an authentication profile for the filter.
Answer: B, C
Question 3.
Which two statements are true regarding licensing for a deployment that contains multiple Access Gateway appliances? (Choose two.)
A. One server is configured as the license server.
B. The primary gateway appliance serves as the license server.
C. The license server must be installed in the DMZ on a separate server.
D. Each gateway appliance must contain its own license.
Answer: A, B
Question 4.
Which type of filter should an administrator create if a filter that specifies a particular NOT logic condition must exist in order for access to be granted?
A. Exclusion filter
B. Negative filter
C. Typical filter
D. Custom filter
Answer: D
Question 5.
What are three settings that an administrator can configure per logon point for published applications? (Choose three.)
A. Window size
B. Clipboard mapping
C. Window color
D. Drive mapping
E. Printer mapping
F. Sound
Answer: A, C, F
Question 6.
From which node in the Access Management Console can an administrator configure event logging?
A. Server Farm node
B. Resource node
C. Gateway Appliances node
D. Servers node
Answer: A
Question 7.
A Citrix Access Gateway administrator at ITCertKeys.com wants to perform automatic drive mapping for clients who have a specific antivirus software installed after those clients log onto the network.
How can the administrator implement this through a connection policy?
A. By configuring "Run DRIVEMAP.EXE"
B. By enabling "Launch scripts" on the server
C. By configuring "Execute logon scripts"
D. By enabling "Connect drive"
Answer: C
Question 8.
Which two authentication methods can be implemented to provide Advanced Authentication? (Choose two.)
A. Smart Cards
B. LDAP
C. Secure Computing SafeWord PremierAccess
D. RSA Security SecurID
Answer: C, D
Question 9.
Which setting must be configured in a policy to grant privileges to an access server farm?
A. Allow Logon
B. Show Logon Resource
C. Show Local Farm
D. Permit Access Control
Answer: A
Question 10.
Which statement is true regarding Workspace Control?
A. Workspace Control is not supported if more than two Presentation Server farms are assigned
to a single logon point.
B. Users always have options to disconnect or keep launched applications when they are logged
off.
C. Only disconnected sessions can be reconnected.
D. Workspace Control can only be set per logon point.
Answer: D
|
Question 1.
How do NBX phones prioritize audio traffic?
A. NBX phones place audio traffic into a priority queue within the NCP, forwarding all voice traffic
before forwarding data packets
B. NBX phones tag voice packets usingDiffServ for all LAN communication
C. NBX phones forward all voice packets to IEEE 802.1p aware hubs
D. NBX phones use VLAN-tagged frames with the priority level automatically set to 6
Answer: D
Question 2.
Which three are features/requirements for using Unified Messaging for an NBX system? (Choose three.)
A. Users can use a TAPI4 compliant application to access and manage voice messages on a
computer
B. Can use the computer default media player to listen to a message
C. Requires NBXpcXset client software
D. APX messaging service functionality is provided by IMAP client on the NBX NCP
E. Users can use an IMAP4 compliant application to access and manage voice messages on a
computer
F. Requires a Windows-based PC with a minimum of 64MB RAM and full-duplex sound card
Answer: B, E, F
Question 3.
Which three are hardware attributes of the 3Com NBX 100 Communication System? (Choose three.)
A. Is a combination of two required chassis ?the Network Call Processor and the interface
chassis
B. Offers optional hot-swap power supply
C. Requires only one Network Call Processor card, even if multiple NBX 100 Chassis are
Installed on a LAN
D. Provides one 10/100 Mbps Ethernet switched port on the NCP for network connectivity
E. Has 7 card slots, 6 of which are useable with the top useable slot designated for the Network
Call Processor Card
F. Requires a Network Call Processor (NCP) for call setup and teardown
Answer: C, E, F
Question 4.
What is Telephone Applications Program Interface (TAPI) Route Point?
A. Virtual device within the Network Call Processor (NCP) to which inbound calls can be mapped
for a 3rd party application that monitors the route point and makes intelligent call route
decisions
B. Virtual device within the Network Call Processor (NCP) to which outbound calls can be
mapped, allowing 3rd party applications to make intelligent routing decisions for the call
C. Virtual Network Call Processor (NCP) device or third party application that monitors and maps
incoming calls, allowing the NCP to make intelligent routing decisions for the call
D. NBX feature enabled in the System / TAPI Setup menu that provides intelligent Layer 3 IP
routing for TAPI messages on a multi-system, company-wide bases
Answer: A
Question 5.
How does the NBX administrator get both internal and external calls to use Timed Routes?
A. Create the necessary entries in the Dial Plan using the keywords "inbound" and " outbound" to
specify call direction
B. Create the necessary entries in both the Internal and External Dial Plan tables
C. Create the necessary entries in both the Internal and Incoming Dial Plan tables
D. The Dial Plan has an inbound and outbound section where the specific Timed Routes are
coded
E. The Dial Plan does not support alternate routes for inbound calls
Answer: C
Question 6.
Which three best describe how members Login/Logout of a Hunt Group? (Choose three.)
A. Group members can login and logout as their schedule requires
B. To login/logout a user only needs to pickup their phone and enter their voice mail password
C. Administrator can set optional automatic logout to force a logout if an incoming call is not
answered at a phone
D. A dynamic login member must login at the start of a day and will only need to login again if
They are logged out after 15 minutes pass between phone calls
E. A forced login member is always logged in whether they are at their phone or not
F. All members must login only once during the day. They are automatically logged out at the end
of the day based on the NBX System Business Time definition
Answer: A, C, E
Question 7.
The NBX Dial Plan can be configured to route calls to an alternate carrier or to replace an internal extension number with an external number, for example, a cell phone.
A. False
B. True
Answer: B
Question 8.
Which of the following NBX Communication Systems support software version R5.0? (Choose three.)
A. NBX 25
B. VCX 7000
C. VCX 6000
D. NBX 100
E. NBX V5000
F. NBX V3000
Answer: D, E, F
Question 9.
Which three office-to-office and/or office-to-remote user call options are supported by the NBX systems? (Choose three.)
A. With a single NBX system at HQ, users can call to/from a remote office across the data
network WAN link using Layer 3 IP communications
B. With a NBX system and NBXConneXtions Gateways at each location, users can call to/from
the sites via a WAN link that supports IP protocol, for example, VPN, T1, E1 and Frame Relay
C. With a NBX Network Call Processor (NCP) and NBXConneXtions Gateways at each site,
Users can call to/from the sites via a Virtual Tie Line (VTL)
D. With a NBX Network Call Processor (NCP) at each location, users can call to/from the sites via
a Virtual Tie Line (VTL) using IP On-the-Fly or a Standard IP license
E. With a single NBX system at HQ andpcXset on the remote office PC, the remote user can call
to/from HQ via any WAN link using TCP/IP Layer 4 communications
Answer: A, B, D
Question 10.
Which three changes require a NBX system reboot? (Choose three.)
A. Change to NCP information, for example, IP address, default gateway
B. Adding any new interface card to the NBX chassis, for example, Digital Line Card, Hub card,
etc.
C. Change to network protocol, for example, Standard IP or IP On-the-Fly
D. Change to Digital Line Card protocol, for example, Standard IP or IP On-the-Fly
E. Removing an interface card from an NBX chassis
F. New software version
Answer: A, C, F
|
Urgent Requred plz latest dump send me thanks
|
thanks buddy
|
Can someone send me the 70-284 braindump? thanks in advance
Copyright © 2004 CertsBraindumps.com Inc. All rights reserved.