SANS - SEC 301 AND CCNA LEARNING
SET
Which of the following are true of RIPv1? (Select two.)
A
Administrative distance of 120
B
Vendor specific
C
Is classful
D
Administrative distance of 90
E
Is classless - ANSWERS-A,C
Assign an access interface to access a specific VLAN - ANSWERS-
SW1(config)# interface fastEthernet 0/5
SW1(config-if)# switchport mode access
SW1(config-if)# switchport access vlan 10
Which of the following is the term for packets that are flooded when
a topology change occurs? - ANSWERS-LSA
,You want to disable sending RIP messages on interface serial 0/1.
Which of the following commands would you use?
A
RouterA>passive-interface serial 0/1
B
RouterA(config-router)#passive-interface serial 0/1
C
RouterA#passive-interface serial 0/1
D
RouterA(config)#passive-interface serial 0/1 - ANSWERS-
RouterA(config-router)#passive-interface serial 0/1
You have configured messages for banner exec, banner incoming,
banner login, and banner motd. When you connect to a console
interface, what is the first message you will see? - ANSWERS-banner
motd
Which file contained in flash memory on a Cisco switch is used to
store secured configuration data such as cryptography keys? -
ANSWERS-private-config.text
What layer of the OSI model does CDP run at? - ANSWERS-Data Link
,what does EIGRP use as its metrics by default? - ANSWERS-Bandwith
and Delay
What is the administrative distance of a connected route? -
ANSWERS-0
You rely on CDP for network administration within your network, but
you would like to prevent CDP information from being accessed from
external devices. Which set of commands should you execute on
your router? - ANSWERS-interface serial0/0
no cdp enable
Everyone can do everything they need to do and nothing more.
Bradley Manning - WikiLeaks Target - HVAC hack - ANSWERS-Principle
of Least Privilege
The cornerstone of all security: Everyting done in security addresses
one or more of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties
into principle of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.:
Delta $5 tickets round trip tickets to anywhere Delta flies/attach on
pricing database
Availability - If you cannot use it, why do you have it? - ANSWERS-CIA
Triad
, Pharmaceuticals and government, research - ANSWERS-
Confidentiality
Financials maintained in part by confidentiality - ANSWERS-Integrity
eCommerce Ex. Amazon make $133,000/per minute thus denial of
service is critical business impact; power company need to keep
lights on = availability issue - ANSWERS-Availability
Authentication, Authorization, Accountability - ANSWERS-AAA
Detailed steps to make policy happen - ANSWERS-Procedure
Policy, Procedure and Training - ANSWERS-PPT
Users must know what policies and procedures say to follow them. -
ANSWERS-Training
Broad general statement of management's intent to protect
information - ANSWERS-Policy
A security professional needs to be:
1/3 technologist
SET
Which of the following are true of RIPv1? (Select two.)
A
Administrative distance of 120
B
Vendor specific
C
Is classful
D
Administrative distance of 90
E
Is classless - ANSWERS-A,C
Assign an access interface to access a specific VLAN - ANSWERS-
SW1(config)# interface fastEthernet 0/5
SW1(config-if)# switchport mode access
SW1(config-if)# switchport access vlan 10
Which of the following is the term for packets that are flooded when
a topology change occurs? - ANSWERS-LSA
,You want to disable sending RIP messages on interface serial 0/1.
Which of the following commands would you use?
A
RouterA>passive-interface serial 0/1
B
RouterA(config-router)#passive-interface serial 0/1
C
RouterA#passive-interface serial 0/1
D
RouterA(config)#passive-interface serial 0/1 - ANSWERS-
RouterA(config-router)#passive-interface serial 0/1
You have configured messages for banner exec, banner incoming,
banner login, and banner motd. When you connect to a console
interface, what is the first message you will see? - ANSWERS-banner
motd
Which file contained in flash memory on a Cisco switch is used to
store secured configuration data such as cryptography keys? -
ANSWERS-private-config.text
What layer of the OSI model does CDP run at? - ANSWERS-Data Link
,what does EIGRP use as its metrics by default? - ANSWERS-Bandwith
and Delay
What is the administrative distance of a connected route? -
ANSWERS-0
You rely on CDP for network administration within your network, but
you would like to prevent CDP information from being accessed from
external devices. Which set of commands should you execute on
your router? - ANSWERS-interface serial0/0
no cdp enable
Everyone can do everything they need to do and nothing more.
Bradley Manning - WikiLeaks Target - HVAC hack - ANSWERS-Principle
of Least Privilege
The cornerstone of all security: Everyting done in security addresses
one or more of these three things
Confidentiality, Integrity, availability
Confidentiality - Only those who need to access something can; ties
into principle of least privilege
Integrity - data is edited correctly and by the right people. Failure ex.:
Delta $5 tickets round trip tickets to anywhere Delta flies/attach on
pricing database
Availability - If you cannot use it, why do you have it? - ANSWERS-CIA
Triad
, Pharmaceuticals and government, research - ANSWERS-
Confidentiality
Financials maintained in part by confidentiality - ANSWERS-Integrity
eCommerce Ex. Amazon make $133,000/per minute thus denial of
service is critical business impact; power company need to keep
lights on = availability issue - ANSWERS-Availability
Authentication, Authorization, Accountability - ANSWERS-AAA
Detailed steps to make policy happen - ANSWERS-Procedure
Policy, Procedure and Training - ANSWERS-PPT
Users must know what policies and procedures say to follow them. -
ANSWERS-Training
Broad general statement of management's intent to protect
information - ANSWERS-Policy
A security professional needs to be:
1/3 technologist
