Cisco Implementing Cisco IOS Network Security (IINS v2.0) - 640-554 Free Exam Questions

A. 192.168.1.0/25

B. 172.25.223.0/24

C. 10.0.10.0/24

D. GlobalEthernet0/0 interface address.

A. TFTP

B. FTP

C. syslog

D. SSH

E. HTTPS

F. SDEE

A. aaa accounting network start-stop tacacs+

B. aaa accounting commands 15 start-stop tacacs+

C. aaa accounting exec start-stop tacacs+

D. aaa accounting connection start-stop tacacs+

E. aaa accounting system start-stop tacacs+

A. implementing PKI to authenticate and authorize IPsec VPN peers using digital certificates

B. performing router commands authorization using TACACS+

C. securing the router by locking down all unused services

D. authenticating administrator access to the router console port, auxiliary port, and vty ports

E. tracking Cisco NetFlow accounting statistics

F. authenticating remote users who are accessing the corporate LAN through IPsec VPN connections

A. It is a static NAT configuration that translates the real IP address on the ingress interface to the same IP address on the egress interface.

B. It is a static NAT configuration that translates a real IP address to a mapped IP address.

C. It is a dynamic NAT configuration that translates the real IP address on the ingress interface to the same IP address on the egress interface.

D. It is a dynamic NAT configuration that translates a real IP address to a mapped IP address.

A. The local database is checked first when authenticating console and vty access to the router.

B. If the TACACS+ AAA server is not available, console access to the router can be authenticated using the local database.

C. If the TACACS+ AAA server is not available, no users will be able to establish a Telnet session with the router.

D. The authentication method list used by the console port is named test.

E. The authentication method list used by the vty port is named test.

A. 2001::/32

B. FD00::/8

C. 2002::/16

D. FB00::/8