support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 200-301

Free 200-301 Exam Braindumps
Cisco Certified Network Associate (CCNA) Questions 676–680 (page: 137)

Updated On: 10-Feb-2026
Page 137 of 281
PDF with 1395 Questions

DRAG DROP (Drag and Drop is not supported)
Drag and drop the descriptions of AAA services from the left onto the corresponding services on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



After a recent security breach and a RADIUS failure, an engineer must secure the console port of each enterprise router with a local username and password.
Which configuration must the engineer apply to accomplish this task?

  1. aaa new-model line con 0 password plaintextpassword privilege level 15
  2. aaa new-model aaa authorization exec default local aaa authentication login default radius username localuser privilege 15 secret plaintextpassword
  3. username localuser secret plaintextpassword line con 0 no login local privilege level 15
  4. username localuser secret plaintextpassword line con 0 login authentication default privilege level 15

Answer(s): D



Which wireless security protocol relies on Perfect Forward Secrecy?

  1. WEP
  2. WPA2
  3. WPA
  4. WPA3

Answer(s): D



What is a zero-day exploit?

  1. It is when the network is saturated with malicious traffic that overloads resources and bandwidth.
  2. It is when an attacker inserts malicious code into a SQL server.
  3. It is when a new network vulnerability is discovered before a fix is available.
  4. It is when the perpetrator inserts itself in a conversation between two parties and captures or alters data.

Answer(s): C



A network engineer is replacing the switches that belong to a managed-services client with new Cisco Catalyst switches. The new switches will be configured for updated security standards including replacing.
Telnet services with encrypted connections and doubling the modulus size from 1024. Which two commands must the engineer configure on the new switches? (Choose two.)

  1. transport input ssh
  2. transport input all
  3. crypto key generate rsa modulus 2048
  4. crypto key generate rsa general-keys modulus 1024
  5. crypto key generate rsa usage-keys

Answer(s): A,C



  PDF
Viewing page 137 of 281
Viewing questions 681 - 685 out of 1395 questions


Post your Comments and Discuss Cisco 200-301 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!