1587200651_CH04.pdf

(639 KB) Pobierz
648843070 UNPDF
Exam Topics in this Chapter
58 IOS Specifics
648843070.143.png 648843070.154.png 648843070.165.png 648843070.176.png 648843070.001.png 648843070.012.png 648843070.023.png 648843070.034.png 648843070.045.png 648843070.056.png 648843070.067.png 648843070.078.png 648843070.089.png 648843070.100.png 648843070.103.png 648843070.104.png 648843070.105.png 648843070.106.png 648843070.107.png 648843070.108.png 648843070.109.png 648843070.110.png 648843070.111.png 648843070.112.png 648843070.113.png 648843070.114.png 648843070.115.png 648843070.116.png 648843070.117.png 648843070.118.png 648843070.119.png 648843070.120.png 648843070.121.png 648843070.122.png 648843070.123.png 648843070.124.png 648843070.125.png
C H A P T E R
4
Cisco IOS Specifics and Security
This chapter covers the CCIE IOS Specifics blueprint. Unfortunately, the blueprint does not
detail the exact requirements, and IOS in general could mean the entire range of topics. We
cover topics that are actually possible topics in the written exam and common to the
Routing and Switching blueprint.
This chapter covers the following topics:
Cisco Hardware —This section covers the hardware components on a Cisco router,
namely the System Flash, nonvolatile RAM (NVRAM), and how files are saved to and
from a TFTP server.
show and debug Commands —This section covers the most common show and
debug commands used on Cisco routers to manage an IP network.
Password Recovery —This section covers how password recovery is completed on
Cisco IOS routers.
Basic Security on Cisco Routers —This section reviews some commands used to
ensure that Cisco routers are secured with basic passwords.
IP Access Lists — This section covers both standard and extended IP access lists and
their formats.
“Do I Know This Already?” Quiz
This assessment quiz’s purpose is to help you determine how to spend your limited study
time. If you can answer most or all these questions, you might want to skim the “Foundation
Topics” section and return to it later, as necessary. Review the “Foundation Summary”
section and answer the questions at the end of the chapter to ensure that you have a strong
grasp of the material covered. If you already intend to read the entire chapter, you do not
necessarily need to answer these questions now. If you find these assessment questions
difficult, you should read through the entire “Foundation Topics” section and review it until
you feel comfortable with your ability to answer all these and the Q & A questions at the
end of the chapter.
648843070.126.png 648843070.127.png 648843070.128.png 648843070.129.png 648843070.130.png 648843070.131.png 648843070.132.png 648843070.133.png 648843070.134.png 648843070.135.png 648843070.136.png 648843070.137.png 648843070.138.png 648843070.139.png 648843070.140.png 648843070.141.png 648843070.142.png 648843070.144.png 648843070.145.png 648843070.146.png 648843070.147.png 648843070.148.png 648843070.149.png 648843070.150.png 648843070.151.png 648843070.152.png 648843070.153.png 648843070.155.png 648843070.156.png 648843070.157.png 648843070.158.png 648843070.159.png 648843070.160.png 648843070.161.png 648843070.162.png 648843070.163.png 648843070.164.png 648843070.166.png
146 Chapter 4: Cisco IOS Specifics and Security
Answers to these questions can be found in Appendix A, “Answers to Quiz Questions.”
1 What IOS command will display the System Flash?
a. show flash
b. show system flash
c. show memory
d. show process flash
2 The network administrator has forgotten the enable password and all passwords are
encrypted. What should the network administrator do to recover the password without
losing the current configuration?
a. Call the TAC and ask for a special back door password.
b. Call the TAC and raise a case to supply the engineering password.
c. Reboot the router, press the break key during the reload, and enter ROM mode and
change the configuration register.
d. Reboot the router, press the break key during the reload, enter ROM mode and change
the configuration register, and when the router reloads, remove the old configuration.
3 What is the enable password for the following router?
enable password Simon
a. More data required
b. Simon
c. simon or Simon
d. You cannot set the password to a name; it must also contain digits.
4 If the configuration register is set to 0x2101, where is the IOS image booted from?
a. slot0:
b. slot1:
c. Flash
d. ROM
e. TFTP server
648843070.167.png 648843070.168.png 648843070.169.png 648843070.170.png 648843070.171.png 648843070.172.png 648843070.173.png 648843070.174.png 648843070.175.png 648843070.177.png 648843070.178.png 648843070.179.png 648843070.180.png 648843070.181.png 648843070.182.png 648843070.183.png 648843070.184.png 648843070.185.png 648843070.186.png 648843070.002.png 648843070.003.png 648843070.004.png 648843070.005.png 648843070.006.png 648843070.007.png 648843070.008.png 648843070.009.png 648843070.010.png 648843070.011.png 648843070.013.png 648843070.014.png 648843070.015.png 648843070.016.png 648843070.017.png 648843070.018.png 648843070.019.png 648843070.020.png
“Do I Know This Already?” Quiz 147
5 What IOS command will copy the running configuration to a TFTP server? (Select the
best two answers.)
a. copy running-config to tftp
b. write network
c. copy running-config tftp
d. write erase
6 What debug command allows an administrator to debug only packets from the network
131.108.0.0/16?
a. debug ip packet
b. terminal monitor
c. debug ip packet 1
d. access-list 1 permit 131.108.0.0
e. debug ip packet 1
f. access-list 1 permit 131.108.0.0 0.0.255.255
g. debug ip packet 1
h. access-list 1 permit 131.108.0.0 255.255.0.0
7 After entering debug ip packet , no messages appear on your Telnet session. What is the
likely cause?
a. OSPF routing is required.
b. The console port does not support debug output.
c. The terminal monitor command is required.
d. IP packets are not supported with the debug command.
8 To change the configuration register to 0x2141, what is the correct IOS command?
a. copy running-config register
b. configuration 0x2141
c. config 0x2141 register
d. config-register 0x2142
e. config-register 0x2141
648843070.021.png 648843070.022.png 648843070.024.png 648843070.025.png 648843070.026.png 648843070.027.png 648843070.028.png 648843070.029.png 648843070.030.png 648843070.031.png 648843070.032.png 648843070.033.png 648843070.035.png 648843070.036.png 648843070.037.png 648843070.038.png 648843070.039.png 648843070.040.png 648843070.041.png 648843070.042.png 648843070.043.png 648843070.044.png 648843070.046.png 648843070.047.png 648843070.048.png 648843070.049.png 648843070.050.png 648843070.051.png 648843070.052.png 648843070.053.png 648843070.054.png 648843070.055.png 648843070.057.png 648843070.058.png 648843070.059.png 648843070.060.png 648843070.061.png
148 Chapter 4: Cisco IOS Specifics and Security
9 Where is the startup configuration stored on a Cisco router?
a. In the cam table
b. NVRAM
c. RAM
d. Flash
e. slot0:
10 Which of the following statements is true?
a. The enable secret command overrides the enable password command.
b. The enable command overrides the enable secret password command.
c. Enable passwords cannot be used when the secret password is used.
d. Both a and c are true.
11 A Cisco router has the following configuration:
line vty 0 4
login
What will happen when you Telnet to the router?
a. You will be prompted for the login password.
b. You will enter EXEC mode immediately.
c. You cannot access the router without the password set.
d. More configuration required.
12 A Cisco router has the following configuration:
line vty 0 4
no login
password cIscO
When a Telnet user tries to establish a remote Telnet session to this router, what will
happen?
a. You will be prompted for the login password cIscO.
b. You will enter EXEC mode immediately.
c. You cannot access the router without the password set.
d. More configuration required.
e. You will be prompted for the login password; password case does not matter.
648843070.062.png 648843070.063.png 648843070.064.png 648843070.065.png 648843070.066.png 648843070.068.png 648843070.069.png 648843070.070.png 648843070.071.png 648843070.072.png 648843070.073.png 648843070.074.png 648843070.075.png 648843070.076.png 648843070.077.png 648843070.079.png 648843070.080.png 648843070.081.png 648843070.082.png 648843070.083.png 648843070.084.png 648843070.085.png 648843070.086.png 648843070.087.png 648843070.088.png 648843070.090.png 648843070.091.png 648843070.092.png 648843070.093.png 648843070.094.png 648843070.095.png 648843070.096.png 648843070.097.png 648843070.098.png 648843070.099.png 648843070.101.png 648843070.102.png
Zgłoś jeśli naruszono regulamin