Cisco-IINS Implementing Cisco IOS Network Security Set 4

cisco self-defending network ✘ implementing AAA command authorization ✘ the auto secure CLI command ✘ performing a security audit via SDM ✔

uses the same keys to encrypt and decrypt data ✘ uses MD5 hashing algorithms for digital signage encryption ✘ uses different keys to encrypt and decrypt data ✘ uses SHA-1 hashing algorithms for digital signage encryption ✔

they are often used for wire-speed encryption in data networks ✘ they are based on complex mathematical operations and can easily be accelerated by hardware ✘ they offer simple key management properties ✘ they are best used for one-time encryption needs ✔

they are easily reversed to decipher the message context ✘ they convert arbitrary data into fixed length digits ✘ they are based on a two-way mathematical function ✘ they are used for encrypting bulk data communications ✔

they operate in promiscuous mode ✘ they operate in inline mode ✘ they have no potential impact on the data segment being monitored ✘ they are more vulnerable to evasion techniques than IDS ✔

policies are applied to traffic moving between zones, not between interfaces ✘ the firewalls can be configured simultaneously on the same interface as classic CBAC using the ip inspectCLI command ✘ interface ACLs are applied before zone-based policy firewalls when they are applied outbond ✘ when configuring with the ?PASS? action, stateful inspection is applied to all traffic passing between theconfigured zones ✔

Transform set configuration mode ✘ Crypto map configuration mode ✘ ISAKMP configuration mode ✘ Interface configuration mode ✔

show crypto isakmp sa ✘ show crypto ipsec sa ✘ show crypto ike active ✘ show crypto sa active ✔

Meet-in-the-middle ✘ Spoofing ✘ Stream cipher ✘ Brute-force ✔

Vigen ✘ Stream cipher ✘ Transposition cipher ✘ Block cipher ✔