Cisco ENCOR Infrastructure Security 2

Question 1

What is the main difference between TACACS+ and RADIUS regarding authorization?

Accepted Answer

TACACS+ separates authentication and authorization; RADIUS combines them

Answer

RADIUS separates authentication and authorization; TACACS+ combines them

Answer

Both combine all three AAA functions

Answer

RADIUS uses per-command authorization; TACACS+ does not

Question 2

Which 802.1X component authenticates the supplicant and communicates with the authentication server?

Accepted Answer

Authenticator

Answer

Supplicant

Answer

Authentication Server

Answer

RADIUS proxy

Question 3

What is the purpose of Dynamic ARP Inspection (DAI)?

Accepted Answer

Prevent ARP spoofing by validating ARP packets against the DHCP snooping binding table

Answer

Block ARP broadcasts

Answer

Rate-limit ARP traffic

Answer

Encrypt ARP replies

Question 4

In a ZBF configuration, which zone do router interfaces belong to by default?

Accepted Answer

no zone (no default)

Answer

self zone

Answer

outside zone

Answer

trust zone

Question 5

Which Cisco feature uses cryptographic hashes to verify that routing updates have not been tampered with?

Accepted Answer

HMAC-MD5 or SHA authentication on routing protocols

Answer

IPsec AH

Answer

MACsec

Answer

SSL/TLS

Question 6

What type of ACL can filter traffic based on both source and destination IP, and also TCP/UDP port numbers?

Accepted Answer

Extended ACL

Answer

Standard ACL

Answer

Named ACL

Answer

Reflexive ACL