WAN Technologies & Network Security Flashcards

A router is configured with 'ip nat inside source list 1 interface Serial0/0 overload'. What does the 'overload' keyword enable?

Answer: PAT (Port Address Translation) using one public IP

The 'overload' keyword enables PAT, which multiplexes many private addresses to a single public IP using unique port numbers.

Which WAN connection type provides a dedicated, always-on circuit between two locations with guaranteed bandwidth?

Answer: Leased line (point-to-point)

Leased lines provide a permanent dedicated circuit between two sites with consistent, guaranteed bandwidth.

What is the function of the 'established' keyword in an extended ACL?

Answer: Permits TCP packets that are part of an existing session (ACK or RST set)

The 'established' keyword matches TCP packets with ACK or RST flags set, indicating they belong to an existing connection.

In a GRE tunnel configuration, which command defines the tunnel source on a Cisco router?

Answer: tunnel source

'tunnel source' specifies the interface or IP address used as the GRE tunnel's originating endpoint.

Which of the following is a characteristic of CHAP authentication used with PPP?

Answer: A three-way handshake uses a challenge and MD5 hash

CHAP uses a three-way handshake where the authenticator sends a challenge and the peer responds with an MD5 hash of the challenge and password.

Which protocol is used by MPLS to distribute label information between routers?

Answer: LDP (Label Distribution Protocol)

LDP (Label Distribution Protocol) is the primary protocol used in MPLS networks to exchange label bindings between routers.

A standard ACL should be placed as close to which device as possible?

Answer: The destination of the traffic

Standard ACLs filter only by source address, so they must be placed close to the destination to avoid blocking unintended traffic.