⟩ Suppose The topology map in the draft design document should cover which twolayers of the OSI model? (Choose two.)A. physicalB. data linkC. networkD. transportE. sessionF. application
A. physical
C. network
A. physical
C. network
Explain Which default administrator group has delete permissions?A. adminB. help-deskC. add-editD. full-control
Suppose Based on the Boolean order of precedence, how would Cisco NAC Appliance evaluate the following rule?AdAwareLogRecent&(NorAVProcessIsActiveymAVProcessIsActive)A. (The Norton Antivirus is active and there is a recent Ad Aware log entry) or (the Symantec antivirus process is active).B. There is a recent Ad Aware log entry, the Norton Antivirus is active, and the Symantec antivirus process is active.C. (Either the Norton Antivirus or the Symantec antivirus process is active) and (there is a recent Ad Aware log entry).D. There is a recent Ad Aware log entry or the Norton Antivirus is active, or the Symantec antivirus process is active.
Explain What are the two types of traffic policies that apply to user roles? (Choosetwo.)A. IP-basedB. peer-basedC. host-basedD. manager-basedE. server-basedF. VLAN-based
How to ensure that the Cisco NAS has the most recent version of the Cisco NAA to install on user devices?A.NAA to all Cisco Each time the Cisco NAA is upgraded, the Cisco NAM automatically downloads the new version of Cisco NAS servers.B. From the Cisco NAS Web Admin Console, enable Cisco NAA autoupdate on the Administration >Software Update form.C. The Cisco NAA is upgraded directly to each Cisco NAS using the Upgrade Server form available on theCisco NAM web console GUI.D. Configure the Cisco NAS by selecting which Cisco NAA to upgrade in the Cisco NAA Upgrade form.
Suppose The NAS is configured to autogenerate an IP address pool of 30 subnets with a netmask of /30, beginning at address 192.168.10.0. Which IP address is leased to the end-user host onthe second subnet?A. 192.168.10.4B. 192.168.10.5C. 192.168.10.6D. 192.168.10.7
Explain What is the result when the condition statement in a Cisco NAA check forrequired software evaluates to false on a client machine?A. The required software is automatically downloaded to the user device.B. The required software is made available after the user is quarantined.C. The user is put in the unauthenticated role and the software is considered missing.D. The user is placed in the temporary role and the software is made available.
Explain What best describes the following configuration example of allowas-in? router bgp 100address-family ipv4 vrf CustomerAneighbor 195.12.4.5 remote-as 123 neighbor 195.12.4.5activateneighbor 195.12.4.5 allowas-in 2A.permits incoming BGP updates defined by access-list 2B.permits incoming BGP updates defined by class-map 2C.permit incoming BGP updates defined by route-map 2D.permits incoming BGP updates with no more than two occurrences of AS 100 in the AS pathE.permits incoming BGP updates with no more than two occurrences of AS 123 in the AS path
Explain Which three statements are correct regarding Layer 2 overlay VPNs and peer-to-peer VPNs?A.Peer-to-peer VPNs require the establishment of virtual circuits to connect the different customer sitestogether.B.Peer-to-peer VPNs require the service provider to participate in the customer routing, acceptingcustomer routes, transporting them across the service provider backbone, and finally propagating them toother customer sites.C.With peer-to-peer VPNs, the service provider is responsible for transport of Layer 2 frames betweencustomer sites, and the customer takes responsibility for all higher layers.D.The implementation of Layer 2 overlay VPNs is the traditional switched-WAN model, implemented withtechnologies like X.25, Frame Relay or ATM.E.With Layer 2 overlay VPNs, the service provider is not aware of customer routing and has noinformation about customer routes.F.It is simple to implement Layer 2 overlay VPNs because the Customer Edge (CE) router just needs aconnection to the Ser
Which three components comprise a Cisco NAC Appliance solution? (Choose three.)A. a NAC-enabled Cisco routerB. a Linux server for in-band or out-of-band network admission controlC. a Linux server for centralized management of network admission serversD. a Cisco router to provide VPN servicesE. a read-only client operating on an endpoint deviceF. a NAC-enabled Cisco switch
When configuring the Cisco NAM to implement Cisco NAA requirementchecking on client machines, what is the next step after configuring checks and rules?A. retrieve updatesB. require the use of the Cisco NAAC. configure session timeout and traffic policiesD. map rules to requirementE. configure requirements