Cisco Implementing Cisco IOS Network Security Set 4

64 bits ✘ 128 bits ✘ 96 bits ✘ 156 bits ✔

AAA Summary ✘ AAA Servers and Groups ✘ Authentication Policies ✘ Authorization Policies ✔

Authentication Policies ✘ Authentication Policies ?Login ✘ AAA Servers and Groups ✘ AAA Summary ✔

RADIUS ✘ AAA ✘ TACACS+ ✘ NAS ✔

debug aaa authentication ✘ test aaa group ✘ test aaa accounting ✘ aaa new-model ✔

TACACS+ ✘ authentication ✘ authorization ✘ accounting ✔

permit esp 192.168.8.4 255.255.255.252 192.168.8.32 255.255.255.224

✘

permit esp 192.168.8.4 0.0.0.31 192.168.8.32 0.0.0.31

✘

permit esp 192.168.8.4 255.255.255.252 224.168.8.32 255.255.255.192

✘

permit esp 192.168.8.4 0.0.0.3 192.168.8.32 0.0.0.31

✔

access-list 101 deny ip host 172.16.0.1 any ✘ access-list 101 deny ip any host 172.16.0.1 ✘ access-list 101 deny ip any any ✘ access-list 11 deny host 172.16.0.1 ✔

A private VLAN partitions the Layer 2 broadcast domain of a VLAN into subdomains. ✘ A private VLAN partitions the Layer 3 broadcast domain of a VLAN into subdomains. ✘ A private VLAN enables the creation of multiple VLANs using one broadcast domain. ✘ A private VLAN combines the Layer 2 broadcast domains of many VLANs into one major broadcast domain. ✔

VLAN-hopping attacks ✘ CAM-table overflow ✘ denial-of-service attacks ✘ MAC-address spoofing ✔