Cisco CSI Cisco SAFE Implementation Set 3

ISAKMP is enabled when the ISAKMP policy is created. ✘ ISAKMP is enabled when the crypto map is applied to the interface. ✘ ISAKMP is disabled by default. ✘ ISAKMP is enabled by default. ✔

Software access option ✘ Remote site firewall option ✘ Hardware VPN Client option ✘ Dial-up access option ✔

MGCP ✘ RTP ✘ SIP ✘ H.323 ✔

TCP port numbers greater than 5060 ✘ UDP port numbers between 2427 and 2600 ✘ TCP port numbers between 1720 and 1790 ✘ UDP port numbers greater than 16384 ✔

IP address ✘ MAC address ✘ SIP address ✘ IP and MAC address ✔

EAP provides wireless gateway and complementary code keying. ✘ EAP provides centralized authentication and dynamic key distribution. ✘ EAP provides open authentication and shared key distribution. ✘ EAP provides message integrity check and wireless domain service. ✔

TKIP is 802.11i standard that offers per-packet keying and message integrity check. ✘ TKIP is 802.11q standard that offers complementary code keying and message integrity check. ✘ TKIP is 802.11i standard that offers complementary code keying and message integrity check. ✘ TKIP is 802.11q standard that offers per-packet keying and message integrity check. ✔

Physical ✘ Network ✘ Transport ✘ Data link ✔

Database server ✘ Application server ✘ URL filtering server ✘ Proxy server ✔

Session replay ✘ Both Man-in-the-middle attacks and session replay. ✘ Neither Man-in-the-middle attacks no session replay. ✘ Man-in-the-middle attacks. ✔