Free Practice Questions for Cisco 200-301 Exam

“Encapsulating Security Payload

…

Unlike Authentication Header (AH), ESP in transport mode does not provide integrity and authentication for the entire IP packet. However, in Tunnel Mode, where the entire original IP packet is encapsulated with a new packet header added, ESP protection is afforded to the whole inner IP packet (including the inner header) while the outer header (including any outer IPv4 options or IPv6 extension headers) remains unprotected.

This is a training program which simulates an attack, not a real attack (as it says “The webpage that opens reports that it was safe”) so we believed it should be called a “user awareness” program.

Therefore the best answer here should be “user awareness”. This is the definition of

“User awareness” from CCNA 200- 301 Offical Cert Guide Book:

“User awareness: All users should be made aware of the need for data confidentiality to protect corporate information, as well as their own credentials and personal information. They should also be made aware of potential threats, schemes to mislead, and proper procedures to report security incidents. ” Note: Physical access control means infrastructure locations, such as network closets and data centers, should remain securely locked.

SNMP is an application-layer protocol that provides a message format for communication between SNMP managers and agents. SNMP provides a standardized framework and a common language used for the monitoring and management of devices in a network.

The SNMP framework has three parts:

+ An SNMP manager

+ An SNMP agent

+ A Management Information Base (MIB)

The Management Information Base (MIB) is a virtual information storage area for network management information, which consists of collections of managed objects.

With SNMP, the network administrator can send commands to multiple routers to do the backup

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-5/configuration-guide/b_cg75/b_cg75_chapter_011110.html

NAT use four types of addresses:

* Inside local address – The IP address assigned to a host on the inside network. The address is usually not an IP address assigned by the Internet Network Information Center (InterNIC) or service provider.

This address is likely to be an RFC 1918 private address.

* Inside global address – A legitimate IP address assigned by the InterNIC or service provider that represents one or more inside local IP addresses to the outside world.

* Outside local address – The IP address of an outside host as it is known to the hosts on the inside network.

* Outside global address – The IP address assigned to a host on the outside network. The owner of the host assigns this address.

The “ipv6 address autoconfig” command causes the device to perform IPv6 stateless address autoconfiguration to discover prefixes on the link and then to add the EUI-64 based addresses to the

interface.

Addresses are configured depending on the prefixes received in Router Advertisement (RA)

messages.

The device will listen for RA messages which are transmitted periodically from the router (DHCP

Server).

This RA message allows a host to create a global IPv6 address from:

+ Its interface identifier (EUI-64 address)

+ Link Prefix (obtained via RA)

Note: Global address is the combination of Link Prefix and EUI-64 address