Question 1

Which set of actions satisfy the requirement for multifactor authentication?

Accepted Answer

Multifactor authentication requires two or more different factors to authenticate a user. In this case, the user enters a username and password (first factor) and then clicks a notification in an authentication app on a mobile device (second factor).

Question 2

What is an advantage of Cisco DNA Center versus traditional campus device management?

Accepted Answer

Cisco DNA Center supports numerous extensibility options, including cross-domain adapters and third-party SDKs, which allows for greater flexibility and integration with other systems compared to traditional campus device management.

Question 3

How does Cisco DNA Center gather data from the network?

Accepted Answer

Cisco DNA Center gathers data from network devices using services like SNMP, syslog, and streaming telemetry, which provide detailed information about the network's performance and status.

Question 4

A network administrator must configure SSH for remote access to router R1. The requirement is to use a public and private key pair to encrypt management traffic to and from the connecting client. Which configuration, when applied, meets the requirements?

Accepted Answer

The correct configuration involves generating an RSA key pair with a specified modulus size, which is used for SSH encryption.

Question 5

Refer to the exhibit. What configuration for RTR-1 denies SSH access from PC-1 to any RTR-1 interface and allows all other traffic?

Accepted Answer

The answer of Refer to the exhibit. What configuration for...

Question 6

Which purpose does a northbound API serve in a controller-based networking architecture?

Accepted Answer

A northbound API in a controller-based networking architecture allows the controller to communicate with applications, enabling them to request services and information from the network.

Question 7

What is the function of a server?

Accepted Answer

A server provides shared applications, resources, and services to end users or other computers in a network.

Question 8

What role does a hypervisor provide for each virtual machine in server virtualization?

Accepted Answer

A hypervisor provides control and distribution of physical resources by managing and allocating the underlying hardware resources to each virtual machine in server virtualization.

Question 9

What is a function of a remote access VPN?

Accepted Answer

A remote access VPN allows users to securely connect to a company's internal network from a remote location, enabling access to network resources through a secure tunnel.

Question 10

What are two southbound APIs? (Choose two.)

Accepted Answer

The answer of What are two southbound APIs? (Choose two.)
...

Question 11

A port security violation has occurred on a switch port due to the maximum MAC address count being exceeded. Which command must be configured to increment the security-violation count and forward an SNMP trap?

Accepted Answer

The "switchport port-security violation restrict" command increments the security-violation count and sends an SNMP trap when a violation occurs.

Question 12

An email user has been lured into clicking a link in an email sent by their company's security organization. The webpage that opens reports that it was safe, but the link may have contained malicious code. Which type of security program is in place?

Accepted Answer

The scenario describes a user awareness program, where the company's security organization tests employees' ability to recognize phishing attempts by sending simulated phishing emails.

Question 13

How do traditional campus device management and Cisco DNA Center device management differ in regards to deployment?

Accepted Answer

Cisco DNA Center provides automation and centralized management, allowing for quicker deployment of network configurations compared to traditional methods.

Question 14

Which two capabilities of Cisco DNA Center make it more extensible? (Choose two.)

Accepted Answer

Cisco DNA Center is extensible through REST APIs that enable external applications to interact with it natively, and SDKs that allow integration with third-party network equipment.

Question 15

What are two recommendations for protecting network ports from being exploited when located in an office space outside of an IT closet? (Choose two.)

Accepted Answer

Implementing port-based authentication ensures that only authorized devices can connect to the network, enhancing security. Shutting down unused ports prevents unauthorized access by ensuring that no rogue devices can connect to the network through these ports.

Question 16

What benefit does controller-based networking provide versus traditional networking?

Accepted Answer

Controller-based networking centralizes network management, allowing for easier configuration and monitoring from a single point, which simplifies network operations and management.

Question 17

Refer to the exhibit. A network engineer must block access for all computers on VLAN 20 to the web server via HTTP. All other computers must be able to access the web server. Which configuration when applied to switch A accomplishes the task?

Accepted Answer

The answer of  Refer to the exhibit. A network...

Question 18

Refer to the exhibit. An administrator configures four switches for local authentication using passwords that are stored as a cryptographic hash. The four switches must also support SSH access for administrators to manage the network infrastructure. Which switch is configured correctly to meet these requirements?

Accepted Answer

The answer of Refer to the exhibit. An administrator configures...

Question 19

Refer to the exhibit. If the network environment is operating normally, which type of device must be connected to interface FastEthernet 0/1?

Accepted Answer

The answer of Refer to the exhibit. If the network...

Question 20

Which CRUD operation modifies an existing table or view?

Accepted Answer

The UPDATE operation modifies an existing table or view by changing the data in the table or view.

Exam 4: Cisco Certified Network Associate (CCNA)