NETWORK INTERVIEW QUESTIONS
1) What flavor of Network Address Translation can be used to have one IP address allow many
users to connect to the global Internet?
A. NAT
B. Static
C. Dynamic
D. PAT
2) What command is used to create a backup configuration?
A. copy running backup
B. copy running-config startup-config
C. config mem
D. wr mem
3) Which statement is true regarding classless routing protocols?
1. The use of discontiguous networks is not allowed.
2. The use of variable length subnet masks is permitted.
3. RIPv1 is a classless routing protocol.
4. IGRP supports classless routing within the same autonomous system.
5. RIPv2 supports classless routing.
A. 1, 3 and 5
B. 3 and 4
C. 2 and 5
D. None of the above
4) Which command will configure a switch port to use the IEEE standard method of inserting VLAN
membership information into Ethernet frames?
A. Switch(config)# switchport trunk encapsulation isl
B. Switch(config)# switchport trunk encapsulation ietf
C. Switch(config)# switchport trunk encapsulation dot1q
D. Switch(config-if)# switchport trunk encapsulation dot1q
5) What VTP mode allows you to change VLAN information on the switch?
A. Client
B. STP
C. Server
D. Transparent
6) Which of the following describes the creation of private networks across the Internet, enabling
privacy and tunneling of non-TCP/IP protocols?
A. HDLC
B. Cable
C. VPN
D. IPSec
7) What is the administrative distance of OSPF?
A. 90
B. 100
C. 110
D. 120
8) If you want to disable STP on a port connected to a server, which command would you use?
A. spanning-tree portfast
B. spanning-tree off
C. spanning-tree security
D. disable spanning-tree
9) Network layer firewall works as a __________
A) Frame filter
B) Packet filter
C) Content filter
D) Virus filter
10) Which of the following is / are the types of firewall?
A) Screen Host Firewall
B) Dual Homed Gateway Firewall
C) Packet Filtering Firewall
D) Dual Host Firewall
11) A stateful firewall maintains a ___________ which is a list of active connections.
A) Routing table
B) Bridging table
C) State table
D) Connection table
12) A packet. Filter firewall filters at the
A) Application or transport
B) Data link layer
C) Physical Layer
D) Network or transport layer
13. Which of the following is an example of a standard IP access list?
A. access-list 110 permit host [Link]
B. access-list 1 deny [Link] [Link]
C. access-list 1 permit [Link] [Link]
D. access-list standard [Link]
14. An administrator has configured a route-based site-to-site IPsec VPN. Which statement is
correct regarding this IPsec VPN configuration?
A. The IPsec firewall policies must be placed at the top of the list.
B. This VPN cannot be used as a part of a hub and spoke topology.
C. Routes are automatically created based on the quick mode selectors.
D. A virtual IPsec interface is automatically created after the Phase 1 configuration is
completed
15. Examine the following log message attributes and select two correct statements from the list
below. (Choose two.) hostname=[Link] profiletype="Webfilter_Profile"
profile="default" status="passthrough" msg="URL belongs to a category with warnings enabled"
A. The website was allowed.
B. The user failed authentication.
C. The category action Application filter.
D. The traffic was blocked
16. An intrusion detection system begins receiving an abnormally high volume of scanning from
numerous sources. Which evasion technique does this attempt indicate?
A. traffic fragmentation
B. resource exhaustion
C. timing attack
D. tunnelling
17. While viewing packet capture data, you notice that one IP is sending and receiving traffic for
multiple devices by modifying the IP header, Which option is making this behavior possible?
A. TOR
B. NAT
C. encapsulation
D. tunnelling
18. In NetFlow records, which flags indicate that an HTTP connection was stopped by a security
appliance, like a firewall, before it could be built fully?
A. ACK
B. SYN ACK
C. RST
D. PSH, ACK
19. Which three options are predefined policy objects for the Cisco ASA NGFW? (Choose three.)
A. URL
B. application
C. useragent
D. access
E. elements
F. system
20. Which of these statements describes the Check Point IPS software blade?
A. A worldwide collaborative security network
B. Prevents vulnerability exploits
C. Controls access to web sites based on category
D. Blocks or limits usage of web applications
Answers:
1.D 2. B 3. C 4. D 5. C 6. C 7. C 8. A 9. B 10. C
11. A 12. D 13. B 14. D 15. A 16. B 17. B 18. C 19. A,B,C 20. B