1.IFEE S. IHEDORO Foundation Express for Field Engineers 01:03:21Question of Question 59 of 59

　　1.This question is not scored, answer it or not will not effect your score. So we dont provide answers for it.

　　Drag and drop question. Drag the items to the proper locations.

　　Correct Answers:

　　2.An 802.11b telephone is receiving an audio signal from an access point, but cannot send audio. What is a possible cause?

　　A: The RSSI value on the telephone is greater than 35.

　　B: The access point is set to receive only at 802.11g data rates.

　　C: The security settings in the telephone do not match the settings in the access point.

　　D: The transmit power in the telephone is significantly lower than the transmit power in the access point.

　　Correct Answers:　D

　　3.Refer to the exhibit. Switches A and C are running PVST+ STP, and Switch B is running 802.1Q STP. If the BPDU of the root in VLAN 1 is better than the BPDU of the root in VLAN 2, then there is no blocking port in the VLAN 2 topology. The BPDU of VLAN 2 never makes a "full circle" around the topology; it is replaced by the VLAN 1 BPDU on the B-C link, because B runs only one STP merged with VLAN 1 STP of PVST+. Thus, there is a forwarding loop. What does PVST+ do to correct this?

　　A: Switch A sends PVST+ BPDUs of VLAN 2 (to the SSTP address that is flooded by Switch B) towards Switch C. Switch C will put port C-B into a type-inconsistent state, which prevents the loop.

　　B: Switch B sends PVST+ BPDUs of VLAN 1 (to the SSTP address that is flooded by Switch A) towards Switch C. Switch C will put port C-B into a type-inconsistent state, which prevents the loop.

　　C: Switch C sends PVST+ BPDUs of VLAN 2 (to the SSTP address that is flooded by Switch B) towards Switch C. Switch A will put port C-B into a type-inconsistent state, which prevents the loop.

　　D: Switch A sends PVST+ BPDUs of VLAN 1 (to the SSTP address that is flooded by Switch B) towards Switch B. Switch A will put port C-B into a type-inconsistent state, which prevents the loop.

　　Correct Answers:　A

　　4.When will you need to enable the transparent tunneling feature on the Cisco VPN Client software?

　　A:

　　B: to enable dynamic routing over the IPSec tunnel using GRE

　　C: to enable V3PN

　　D: if the IPSec-protected traffic is going through a router that is performing NAT or PAT

　　E: if IPSec is using tunnel mode instead of transport mode

　　Correct Answers:　D

　　to enable DMVPN

　　5.Which two statements best describe the wireless core feature set using autonomous access points when implementing Wireless Domain Services? (Choose two.)

　　A:The primary Layer 2 WDS server address is configured via the infrastructure access point GUI.

　　B:The primary Layer 2 WDS server address is automatically discovered by the infrastructure access points through multicast.

　　C:The primary Layer 2 WDS is selected by the highest MAC address, followed by priority number.

　　D:The primary Layer 2 WDS is selected by the highest priority number, followed by MAC address.

　　E:The primary Layer 2 WDS is selected by the highest IP address, followed by MAC address.

　　Correct Answers:　B, D

　　6.You have just configured and enabled the Cisco IOS Firewall feature set from a remote location using the Cisco Router and Security Device Manager (SDM) Firewall wizard. You later want to double-check your configuration using Cisco SDM. However, you find that you can no longer connect to the Cisco IOS Firewall using Cisco SDM. What is the probable cause of this failure?

　　A: You must additionally specify the Cisco SDM management port number to gain access when the configuration has been applied.

　　B: You have not generated an RSA key pair between the host and device to allow secure access via Cisco SDM.

　　C: You have been locked out via access lists that have been applied to the router as a result of your Cisco SDM configuration.

　　D: You must specify the host IP address of Cisco SDM in the Configuration panel for allowed management connections.

　　Correct Answers:　C

　　7.Refer to the exhibit. A host on the Sales subnet (10.0.2.0/24) is not able to initiate a web connection to an outside website. According to the network diagram and the partial Cisco Adaptive Security Device Manager configuration shown in the exhibit, what is the cause of the problem?

　　A: The dynamic NAT global pool is not configured correctly.

　　B: The source networks for static NAT are not configured correctly.

　　C: The administrator needs to add an access list and static command for the return web traffic.

　　D: The source network for dynamic NAT is not configured correctly.

　　Correct Answers:　D

　　8.When implementing an integrated network-security management design, which critical issue should you account for?

　　A: that management stations intercommunicate and can correlate events

　　B: that full syslogging of all events is enabled

　　C: that all network devices are time synchronized

　　D: that SNMP community read-write strings are configured to allow for total management access

　　Correct Answers:　C

　　9.What is the default authentication method when using HTTP to access the Cisco Router and Security Device Manager (SDM), assuming that you are not using the default configuration file (sdmconfig-xxxx.cfg) that comes with Cisco SDM?

　　A: none

　　B: local database

　　C: aaa

　　D: enable password

　　E: line console password

　　F: line vty password

　　Correct Answers:　D

　　10.Which two items have the most influence on an outdoor wireless antenna bridge-path installation? (Choose two.)

　　A:snow

　　B:Earth's curvature

　　C:lightning

　　D:Fresnel zone

　　E:rain

　　Correct Answers:　B, D