What are three key design principles when using a classic hierarchical network model? (Choose three.)
A. The core layer controls access to resources for security.
B. The core layer should be configured with minimal complexity.
C. The core layer is designed first, followed by the distribution layer and then the access layer.
D. A hierarchical network design model aids fault isolation.
E. The core layer provides server access in a small campus.
F. A hierarchical network design facilitates changes.
Answer: B, D, F
Which three techniques can be used to improve fault isolation in an enterprise network design? (Choose three.)
A. aggregate routing information on an OSPF ABR
B. fully meshed distribution layer
C. Equal-Cost Multipath routing
D. EIGRP query boundaries
E. multiple IS-IS flooding domains
F. tuned Spanning Tree Protocol timers
Answer: A, D, E
Sunday, 28 August 2016
Sunday, 10 July 2016
IDS and IPS Buyers Guide: Cisco Offers Integration To Prevent Intrusion Attacks From Reaching Medical Devices, Old and New
A threat that could compromise a device automatically signals Cisco’s Identity Services Engine and Cisco TrustSec to quarantine and prevent the attack.
In a typically short-staffed healthcare IT environment integration and automation are two key components to look for when purchasing a modern intrusion detection and prevention solution. Cisco believes its solution provides just that.
Probably what keeps healthcare security specialists up at night most often are the huge number of older medical devices that cannot be patched or taken offline.
“Many are built atop outdated operating systems like Windows XP, where the original manufacturer did not provide a way to update or patch these systems,” says Steve Caimi, Cybersecurity Specialist, U.S. Public Sector at Cisco.
When Cisco’s IDS and IPS detects a threat that could compromise a medical device its automated system signals Cisco’s Identity Services Engine and Cisco TrustSec to update the network segmentation policy and quarantine the system of origin, thus preventing the attack from reaching the device.
Greg Young, a research vice president at Gartner says that in most cases healthcare has the same security requirements of any business but a notable exception is the need to deploy IPS in front of medical devices as a "pre-patch shield" for operating systems in devices that can’t be patched or taken offline.
Another layer of medical device protection is found in the integrated design of Cisco’s IDS solution that becomes one part of its overall cyber security defenses, including but not limited to network access control and network-based segmentation.
Through its recent purchase of Sourcefire, Cisco now also offers Snort, a rules-based open source network intrusion system. It analyzes traffic and performs packet logging on IP networks in real-time. The open source solution is also designed to detect buffer overflows, stealth port scans, CGI attack, SMB probes, OS fingerprinting attempts among other things.
Pricing Model: Firepower NGIPS (Next Generation IPS) and NGFW (Next Generation Firewall) appliances use a software subscription model for Threat (IPS), URL Filtering, and Advanced Malware Protection (AMP). Available separately or in combinations and available in 1-, 3-, and 5-year terms. In addition, Cisco has maintenance/support contracts for the appliances.
Probably what keeps healthcare security specialists up at night most often are the huge number of older medical devices that cannot be patched or taken offline.
“Many are built atop outdated operating systems like Windows XP, where the original manufacturer did not provide a way to update or patch these systems,” says Steve Caimi, Cybersecurity Specialist, U.S. Public Sector at Cisco.
When Cisco’s IDS and IPS detects a threat that could compromise a medical device its automated system signals Cisco’s Identity Services Engine and Cisco TrustSec to update the network segmentation policy and quarantine the system of origin, thus preventing the attack from reaching the device.
Greg Young, a research vice president at Gartner says that in most cases healthcare has the same security requirements of any business but a notable exception is the need to deploy IPS in front of medical devices as a "pre-patch shield" for operating systems in devices that can’t be patched or taken offline.
Another layer of medical device protection is found in the integrated design of Cisco’s IDS solution that becomes one part of its overall cyber security defenses, including but not limited to network access control and network-based segmentation.
Through its recent purchase of Sourcefire, Cisco now also offers Snort, a rules-based open source network intrusion system. It analyzes traffic and performs packet logging on IP networks in real-time. The open source solution is also designed to detect buffer overflows, stealth port scans, CGI attack, SMB probes, OS fingerprinting attempts among other things.
Pricing Model: Firepower NGIPS (Next Generation IPS) and NGFW (Next Generation Firewall) appliances use a software subscription model for Threat (IPS), URL Filtering, and Advanced Malware Protection (AMP). Available separately or in combinations and available in 1-, 3-, and 5-year terms. In addition, Cisco has maintenance/support contracts for the appliances.
Tuesday, 7 June 2016
Pass4sure 352-001 Question Answer
Refer to the exhibit.
In this design, which technology would provide for the best use of resources to provide end-to-end Layer 2 connectivity?
A. MSTP
B. PAgP
C. Multichassis EtherChannel
D. LACP
Answer: C Passleader 352-001 Exam Question
What are three key design principles when using a classic hierarchical network model? (Choose three.)
A. The core layer controls access to resources for security.
B. The core layer should be configured with minimal complexity.
C. The core layer is designed first, followed by the distribution layer and then the access layer.
D. A hierarchical network design model aids fault isolation.
E. The core layer provides server access in a small campus.
F. A hierarchical network design facilitates changes.
Answer: B, D, F
A. MSTP
B. PAgP
C. Multichassis EtherChannel
D. LACP
Answer: C Passleader 352-001 Exam Question
What are three key design principles when using a classic hierarchical network model? (Choose three.)
A. The core layer controls access to resources for security.
B. The core layer should be configured with minimal complexity.
C. The core layer is designed first, followed by the distribution layer and then the access layer.
D. A hierarchical network design model aids fault isolation.
E. The core layer provides server access in a small campus.
F. A hierarchical network design facilitates changes.
Answer: B, D, F
Friday, 6 May 2016
Pass4sure 352-001 Question Answer
What are two design advantages to using virtual port channel? (Choose two.)
A. enhanced system availability through multiple systems
B. reduced Spanning Tree Protocol convergence time
C. loop management without use of Spanning Tree Protocol
D. ability to use Spanning Tree Protocol blocked ports to forward traffic
E. enhanced ability to recover from Spanning Tree Protocol changes
Answer: A, C
A. enhanced system availability through multiple systems
B. reduced Spanning Tree Protocol convergence time
C. loop management without use of Spanning Tree Protocol
D. ability to use Spanning Tree Protocol blocked ports to forward traffic
E. enhanced ability to recover from Spanning Tree Protocol changes
Answer: A, C
Monday, 4 April 2016
Pass4sure 352-001 Question Answer
A new video multicast application is deployed in the network. The application team wants to use the 239.0.0.1 multicast group to stream the video to users. They want to know if this choice will impact the existing multicast design. What impact will their choice have on the existing multicast design?
A. Because 239.0.0.1 is a private multicast range, a flood of PIM packets that have to be processed by the CPU and hosts will be sent by the routers in the network.
B. Because 239.0.0.1 is a private multicast range, the rendezvous point has to send out constant group updates that will have to be processed by the CPU and hosts.
C. The multicast application sends too many packets into the network and the network infrastructure drops packets.
D. The 239.0.0.1 group address maps to a system MAC address, and all multicast traffic will have to be sent to the CPU and flooded out all ports.
Answer: D
A customer is using a service provider to provide a WAN backbone for a 30-site network. In establishing the network, the customer must work within these constraints: The customer has a self-managed MPLS backbone. The VPLS WAN backbone of the service provider does not support PIM snooping. Multicast VPN must be used for multicast support inside some VRFs. What can the customer do so that multicast traffic is NOT flooded to all sites?
A. Configure static GRE tunnels and run the MPLS and multicast VPN inside these GRE tunnels.
B. Use Label Switched Multicast for the multicast transport.
C. Use PIM-SSM as the multicast routing protocol with IETF Rosen Draft multicast VPN.
D. Configure a static mapping between multicast addresses and MAC addresses.
E. Use GET VPN to encrypt the multicast packets inside the WAN.
Answer: A
A. Because 239.0.0.1 is a private multicast range, a flood of PIM packets that have to be processed by the CPU and hosts will be sent by the routers in the network.
B. Because 239.0.0.1 is a private multicast range, the rendezvous point has to send out constant group updates that will have to be processed by the CPU and hosts.
C. The multicast application sends too many packets into the network and the network infrastructure drops packets.
D. The 239.0.0.1 group address maps to a system MAC address, and all multicast traffic will have to be sent to the CPU and flooded out all ports.
Answer: D
A customer is using a service provider to provide a WAN backbone for a 30-site network. In establishing the network, the customer must work within these constraints: The customer has a self-managed MPLS backbone. The VPLS WAN backbone of the service provider does not support PIM snooping. Multicast VPN must be used for multicast support inside some VRFs. What can the customer do so that multicast traffic is NOT flooded to all sites?
A. Configure static GRE tunnels and run the MPLS and multicast VPN inside these GRE tunnels.
B. Use Label Switched Multicast for the multicast transport.
C. Use PIM-SSM as the multicast routing protocol with IETF Rosen Draft multicast VPN.
D. Configure a static mapping between multicast addresses and MAC addresses.
E. Use GET VPN to encrypt the multicast packets inside the WAN.
Answer: A
Tuesday, 1 March 2016
Pass4sure 352-001 Question Answer
You are designing a network that will run EIGRP over a Metro Ethernet service that does not employ a link-loss technology. What will be the impact on convergence if there is a break in the end-to-end Layer 2
connectivity within the service provider network?
A. The routers will immediately lose their adjacencies and converge.
B. The routing protocol will not converge until the hold timers have expired.
C. The switch ports connected to the router will go down and the routers will immediately converge.
D. The VLAN on the switches will go inactive, the ports associated on the switch will go down, and the routers will immediately converge.
Answer: B
Acme Corporation hired you as a network designer to upgrade their network so that it supports IPv4 and IPv6 multicast. Which two protocols are needed on the LAN switch? (Choose two.)
A. PIM sparse mode
B. IGMP snooping
C. PIM snooping
D. Source Specific Multicast
E. MLD snooping
Answer: B, E
connectivity within the service provider network?
A. The routers will immediately lose their adjacencies and converge.
B. The routing protocol will not converge until the hold timers have expired.
C. The switch ports connected to the router will go down and the routers will immediately converge.
D. The VLAN on the switches will go inactive, the ports associated on the switch will go down, and the routers will immediately converge.
Answer: B
Acme Corporation hired you as a network designer to upgrade their network so that it supports IPv4 and IPv6 multicast. Which two protocols are needed on the LAN switch? (Choose two.)
B. IGMP snooping
C. PIM snooping
D. Source Specific Multicast
E. MLD snooping
Answer: B, E
Thursday, 28 January 2016
Pass4sure 352-001 Question Answer
Voice traffic between two campus enterprise networks is growing. The network designers decide to add a second 10-Mb Metro Ethernet service parallel to their original 10-Mb service in order to provide more bandwidth and diversity.
The QoS profile will be the same on the new 10-Mb service due to the voice stability on the first Metro Ethernet link. When the second link is added to the OSPF domain, which traffic design consideration would have the most impact on the voice traffic when both links are active?
A. per-destination IP address basis
B. per-flow basis
C. per-packet basis
D. per-source IP address basis
Answer: C
The QoS profile will be the same on the new 10-Mb service due to the voice stability on the first Metro Ethernet link. When the second link is added to the OSPF domain, which traffic design consideration would have the most impact on the voice traffic when both links are active?
A. per-destination IP address basis
B. per-flow basis
C. per-packet basis
D. per-source IP address basis
Answer: C
Subscribe to:
Posts (Atom)