Cisco CCIE Security Written v4.0 (Beta) Set 5

to extend a TrustSec domain on switches that do not support packet tagging with SGTs ✘ to map the SGT tag to VLAN information ✘ to allow the SGT tagged packets to be transmitted on trunks ✘ to exchange the SGT information between different TrustSec domains ✔

DNS Public Key (DNSKEY) Next Secure (NSEC) Resource Record Signature (RRSIG) Delegation Signer (DS) Top Level Domain (TLD)

Base64 encoded username and password ✘ MD5 hash of the combined username and password ✘ username in cleartext and MD5 hash of the password ✘ cleartext username and password ✔

Common Name ✘ Issuer Name ✘ Organization ✘ Organizational Unit ✔

in-addr.arpa ✘ ip4.arpa ✘ in-addr.net ✘ ip4.net ✔

random TCP ports ✘ TCP port 21 on the server side ✘ TCP port 21 on the client side ✘ TCP port 20 on the server side ✔ TCP port 20 on the client side ✔

The client is unable to get a directory listing from the server. ✘ The client is unable to create a new file on a server. ✘ The client needs to log in with a username and password. ✘ The client needs to log in using "anonymous" as a username and specifying an email address as apassword. ✔

1 ✘ 8 ✘ 16 ✔

It answers using UTC time. ✘ It uses the local time of the server with its time zone indication. ✘ It uses the local time of the server and does not indicate its time zone. ✘ It answers using the time zone of the client. ✔

The whole communication is not encrypted. ✘ Only the community field is encrypted. ✘ Only the query packets are encrypted. ✘ The whole communication is encrypted. ✔