Jen English: Are you prepared for the CCNA exam?
test your knowledge here. If you're a network
professional or aspire to become one, you've
likely heard of the Cisco certified network
associate Certification Program, or CCNA. And
you've likely been studying and preparing for the
CCNA exam. A CCNA certification shows that an
individual has the knowledge, skills and
credibility to run a network. It can also qualify
recipients for higher salaries, and a wider range
of career path. So are you ready for the CCNA? In
this video, we'll test your knowledge with four
practice questions, but our complete practice
guide includes 12 questions. For the full quiz and
detailed answer key download our study guide by
clicking the link above or in the description
below. Let's get started. Question one, a layer
three switch has been configured to route IP
packets between VLANs one two and three using SV
eyes, which connect to subnets 172 dot two 0.1 dot
zero slash 20 517 2.20 dot 2.0 slash 25 and 172
dot two 0.3 dot zero slash 25 respectively. The
engineer issues a show IP route connected command
on the layer three switch listing the connected
routes. Which of the following answers lists a
piece of information that should be in at least
one of the routes a interface Gigabit Ethernet
zero slash 0.3 b next hop router 172 dot two 0.2
dot one c interface VLAN two or D mask
250 5.25525 5.0? The correct answer is C. Because
on a layer three switch we can enter SPI
configuration mode for VLAN two using the
interface VLAN two command. Question two. Imagine
that you have configured the Enable secret command
followed by the Enable password command from the
console. You log out of the switch and log back in
at the console. Which command defines the password
that you had to enter to access privileged mode? A
enable password be enable secret c neither or D
the password command if it's configured. The
correct answer is B. The enable secret command
cryptographically stores a password to a device so
no one can retrieve it, which provides added
security while the Enable password command does
not. Question three. A next generation firewall
sits at the edge of a company's connection to the
Internet. It has been configured to prevent telnet
clients residing in the internet from accessing
telnet servers inside the company. Which of the
following my next generation firewall use that a
traditional firewall would not a match message
destination well known Port 23 b match message
application data c match message IP protocols 23
or D match message source TCP ports greater than
49,152.
The correct answer is B. Roll several differences
between traditional firewalls and Cisco's next
generation firewalls exist. Application visibility
and control or AVC is among the most important.
This is a way for the firewall to look into a
packet application layer to identify its purpose.
Question four, which actions show a behavior
typically supported by a Cisco next generation
intrusion prevention system beyond the
capabilities of a traditional IPS, a gather and
use host based information for context be
comparisons between messages and a database of
exploit signatures. See logging events for later
review by the security team. D filter you are eyes
using reputation scores, ie both A and D or F both
A and C. The correct answer is E. Cisco often uses
this exams to point out its product lines,
benefits or differentiating factors. This is the
case here as the question requires test takers to
understand the relatively new features of Cisco's
IPS tool. So how did you do need to hit the books
again or are you good to go share your results in
the comments below and be sure to hit that like
button too.