Cisco 200-201 Practice Test - Questions Answers, Page 7
List of questions
Related questions
When communicating via TLS, the client initiates the handshake to the server and the server responds back with its certificate for identification.
Which information is available on the server certificate?
server name, trusted subordinate CA, and private key
trusted subordinate CA, public key, and cipher suites
trusted CA name, cipher suites, and private key
server name, trusted CA, and public key
How does an SSL certificate impact security between the client and the server?
by enabling an authenticated channel between the client and the server
by creating an integrated channel between the client and the server
by enabling an authorized channel between the client and the server
by creating an encrypted channel between the client and the server
Which attack is the network vulnerable to when a stream cipher like RC4 is used twice with the same key?
forgery attack
plaintext-only attack
ciphertext-only attack
meet-in-the-middle attack
Which list identifies the information that the client sends to the server in the negotiation phase of the TLS handshake?
ClientStart, ClientKeyExchange, cipher-suites it supports, and suggested compression methods
ClientStart, TLS versions it supports, cipher-suites it supports, and suggested compression methods
ClientHello, TLS versions it supports, cipher-suites it supports, and suggested compression methods
ClientHello, ClientKeyExchange, cipher-suites it supports, and suggested compression methods
Refer to the exhibit.
Which type of log is displayed?
IDS
proxy
NetFlow
sys
Refer to the exhibit.
What information is depicted?
IIS data
NetFlow data
network discovery event
IPS event data
What is the difference between the ACK flag and the RST flag in the NetFlow log session?
The RST flag confirms the beginning of the TCP connection, and the ACK flag responds when the data for the payload is complete
The ACK flag confirms the beginning of the TCP connection, and the RST flag responds when the data for the payload is complete
The RST flag confirms the receipt of the prior segment, and the ACK flag allows for the spontaneous termination of a connection
The ACK flag confirms the receipt of the prior segment, and the RST flag allows for the spontaneous termination of a connection
Refer to the exhibit.
Which type of log is displayed?
proxy
NetFlow
IDS
sys
How is NetFlow different from traffic mirroring?
NetFlow collects metadata and traffic mirroring clones data.
Traffic mirroring impacts switch performance and NetFlow does not.
Traffic mirroring costs less to operate than NetFlow.
NetFlow generates more data than traffic mirroring.
What makes HTTPS traffic difficult to monitor?
SSL interception
packet header size
signature detection time
encryption
Question