Exam A
QUESTION 1
In an L2TP voluntary tunneling scenario, the VPDN tunel is terminated between:
A. The client and the NAS.
B. The NAS and the LNS.
C. The NAS and the LAC.
D. The client and the LNS.
Correct Answer: D
QUESTION 2
Which IOS QoS mechanism is used strictly to rate limit traffic destined to the router itself?
A. Class-Based Policing
B. Control Plane Policing
C. Dual-Rate Policier
D. Single-Rate Policier.
Correct Answer: B
QUESTION 3
What are two key characteristics of VTP? (Choose 2)
A. VTP messages are sent out all switch-switch connections.
B. VTP L2 messages are communicated to neighbors using CDP.
C. VTP manages addition, deletion, and renaming of VLANs 1 to 4094.
D. VTP pruning restricts flooded traffic, increasing available bandwidth.
E. VTP V2 can only be used in a domain consisting of V2 capable switches.
F. VTP V2 performs consistency checks on all sources of VLAN information.
Correct Answer: DE
QUESTION 4
A network administrator is using a LAN analyzer to troubleshoot OSPF router exchange messages sent to ALL OSPF ROUTERS. To what MAC address are these messages sent?
A. 00-00-1C-EF-00-00
B. 01-00-5E-00-00-05
C. 01-00-5E-EF-00-00
D. EF-FF-FF-00-00-05
E. EF-00-00-FF-FF-FF
F. FF-FF-FF-FF-FF-FF
Correct Answer: B
QUESTION 5
Drop A.

B.
C.
D.
Correct Answer: QUESTION 6
What is Chain of Evidence in the context of security forensics?
A. The concept that evidence is controlled in locked down, but not necessarily authenticated.
B. The concept that evidence is controlled and accounted for as to not disrupt its authenticity and integrity.
C. The concept that the general whereabouts of evidence is known.
D. The concept that if a person has possession of evidence someone knows where the evidence is and can say who had it if it is not logged

Correct Answer: B QUESTION 7
In most buffer overflow attacks, which of the following behavior should be expected?
A. A vulnerability used to overflow the buffer and an exploit used to run malicious software off of the stack.
B. An exploit used to overflow the buffer and a vulnerability used to run malicious software off of the stack.
C. A single crafted packet to overflow the buffer and run malicious software.
D. Shell code to exploit the buffer.

Correct Answer: A QUESTION 8
Which of the following is the most effective technique to prevent source IP Address spoofing?
A. policy based routing (PBR)
B. unicast reverse path forwarding (uRPF)
C. lock and key ACL
D. RFC 1918 filtering
E. IP source routing

Correct Answer: B
QUESTION 9
Whenever a failover takes place on the ASA (configured for failover), all active connections are dropped and clients must re-establish their connections unless:(Choose 2)
A. The ASA is configured for Active-Standby failover.
B. The ASA is configured for Active-Active failover.
C. The ASA is configured for Active-Active failover and a state failover link has been configured.
D. The ASA is configured for Active-Standby failover and a state failover link has been configured.
E. The ASA is configured to use a serial cable as failover link.
F. The ASA is configured for LAN-Based failover.
Correct Answer: CD
QUESTION 10
CSA protects your host by:
A. Preventing browsers from opening network sockets in listening state.
B. Preventing buffer overflows.
C. Preventing users from entering unencrypted passwords.
D. Preventing browsers from acting as client to web servers.
Correct Answer: A