Online Access Free 640-554 Practice Test

Which protocols use encryption to protect the confidentiality of data transmitted between two parties? (Choose two.)

• A.HTTP
• B.SSH
• C.HTTPS
• D.FTP
• E.AAA
• F.Telnet

What is the default STP priority on a switch?

• A.32768
• B.16384
• C.24576
• D.4096

Which IPsec transform set provides the strongest protection?

• A.crypto ipsec transform-set 3 esp-aes 256 esp-sha-hmac
• B.crypto ipsec transform-set 5 esp-des esp-sha-hmac
• C.crypto ipsec transform-set 4 esp-aes esp-md5-hmac
• D.crypto ipsec transform-set 1 esp-3des esp-sha-hmac
• E.crypto ipsec transform-set 2 esp-3des esp-md5-hmac
• F.crypto ipsec transform-set 6 esp-des esp-md5-hmac

Which location is recommended for extended or extended named ACLs?

• A.when using the established keyword, a location close to the destination point to ensure that return traffic is allowed
• B.a location as close to the source traffic as possible
• C.a location as close to the destination traffic as possible
• D.an intermediate location to filter as much traffic as possible

Which option is a key difference between Cisco IOS interface ACL configurations and Cisco ASA appliance interface ACL configurations?

• A.The Cisco IOS interface ACL has an implicit permit-all rule at the end of each interface ACL.
• B.Cisco IOS supports interface ACL and also global ACL. Global ACL is applied to all interfaces.
• C.The Cisco ASA appliance interface ACL configurations use netmasks instead of wildcard masks.
• D.The Cisco ASA appliance does not support standard ACL. The Cisco ASA appliance only support extended ACL.
• E.The Cisco ASA appliance interface ACL also applies to traffic directed to the IP addresses of the Cisco ASA appliance interfaces.