Home
Blog
Hobbies
Movies
Recipes
Dogs
Videos
CCNA Security
Engineering
Forum
Submit
CCNA Security
Home
Chapters
Search
Device Security Quiz
Securing Network Devices
Question 1 of 12
Which Cisco IOS command disables the unsecured HTTP management server on a router?
Select the best answer:
no ip http server
ip http secure-server
no http service
disable http
What is the minimum recommended RSA key modulus size for SSH version 2 on Cisco routers?
Select the best answer:
512 bits
768 bits
1024 bits
256 bits
Cisco privilege level 15 represents:
Select the best answer:
User EXEC mode with no configuration privileges
Privileged EXEC mode with full administrative access
Read-only access limited to show commands
A custom level used only for SSH access
The `banner motd` command on a Cisco router is used to:
Select the best answer:
Display the hostname in the CLI prompt
Display a legal warning message before authentication
Configure the console port password
Advertise the router's IP address via CDP
Which IOS command explicitly restricts a VTY line to accept only SSH connections?
Select the best answer:
ip ssh version 2
transport input ssh
crypto key generate rsa modulus 1024
ip domain-name ssh
The `service password-encryption` command applies which type of encryption to plaintext passwords?
Select the best answer:
MD5 hashing (Type 5)
Type 7 — a weak, reversible obfuscation
AES-256 encryption
SHA-256 hashing
NTP authentication on a Cisco router is configured to:
Select the best answer:
Encrypt NTP packets end-to-end with AES
Verify that NTP updates originate from a trusted time source
Synchronize clocks over HTTPS instead of UDP
Set the correct timezone on the router automatically
What does the Cisco AutoSecure feature do when invoked?
Select the best answer:
Automatically downloads and installs IOS security patches
Disables unnecessary services and interactively prompts to configure security features
Generates ACLs based on live traffic analysis
Encrypts all SNMP community strings with AES
SNMPv3 improves on SNMPv1/v2c primarily by adding:
Select the best answer:
Support for 64-bit performance counters
Authentication and encryption of SNMP messages
TCP transport for reliable delivery
Unlimited community string length
Which Cisco privilege level grants only basic user EXEC commands (ping, traceroute, show version)?
Select the best answer:
Level 0
Level 1
Level 5
Level 15
Which Cisco IOS feature temporarily blocks all login attempts after repeated failures?
Select the best answer:
login block-for
ip access-class (restricts source IP, not attempt count)
no service telnet
aaa authentication attempts login
The `enable secret` command is preferred over `enable password` because it:
Select the best answer:
Uses Type 7 encryption, which is stronger
Stores the password using a one-way MD5 hash, making it more resistant to cracking
Allows the password to be longer than 25 characters
Is required for SSH access on all Cisco platforms
Previous
Next
Submit Quiz