Cisco 640-554 Actual Free Exam Questions & Community Discussion
Which command configures a device to actively watch connection requests and provide immediate protection from DDoS attacks?
Correct Answer: C
Vote an answer
Which Cisco IOS command will verify authentication between a router and a AAA server?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
How are Cisco IOS access control lists processed?
Correct Answer: E
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
CORRECT TEXT




Correct Answer:
For the NTP portion:
Click on Router - Time - NTP and SNTP on left hand pane.
Then click the Add button. Enter the Server IP address and source interface and key information
as specified. Also be sure to click the Prefer button.
For the access rule portion:
Click on Router - ACL - ACL Editor. Click Add button. Then enter Inbound for the name and make
sure rule is extended. Then click Add at the rule entry. Then ensure that permit is selected and
that source and destination boxes both say Any IP Address (They should already).
Under Protocol and Service select EIGRP. Hit OK.
Then click add button again. Leave the source as any and click the destination box as "A network"
and type in 10.0.2.0 and select the wildcard mask as 0.0.0.255. Click on the TCP protocol button
and select "www" Hit OK.
Finally, click on edit for this rule and click on the Associate button. Select the outside interface and
select the inbound direction.
Click on Router - Time - NTP and SNTP on left hand pane.
Then click the Add button. Enter the Server IP address and source interface and key information
as specified. Also be sure to click the Prefer button.
For the access rule portion:
Click on Router - ACL - ACL Editor. Click Add button. Then enter Inbound for the name and make
sure rule is extended. Then click Add at the rule entry. Then ensure that permit is selected and
that source and destination boxes both say Any IP Address (They should already).
Under Protocol and Service select EIGRP. Hit OK.
Then click add button again. Leave the source as any and click the destination box as "A network"
and type in 10.0.2.0 and select the wildcard mask as 0.0.0.255. Click on the TCP protocol button
and select "www" Hit OK.
Finally, click on edit for this rule and click on the Associate button. Select the outside interface and
select the inbound direction.
Which statement about Cisco IOS IPS on Cisco IOS Release 12.4(11)T and later is true?
Correct Answer: A
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
DRAG DROP
Drag each AAA function from the left and drop it on the protocol that it corresponds to on the right.

Drag each AAA function from the left and drop it on the protocol that it corresponds to on the right.

Correct Answer:

Explanation:

What are purposes of the Internet Key Exchange in an IPsec VPN? (Choose two.)
Correct Answer: A,D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
CORRECT TEXT




Correct Answer:
Switch 1>enable
Switch1#config t
Switch1(config)#interface fa0/12
Switch1(config-if)#switchport mode access
Switch1(config-if)#switchport port-security maximum 2
Switch1(config-if)#switchport port-security violation shutdown
Switch1(config-if)#no shut Switch1(config-if)#end
Switch1#copy run start
Switch1#config t
Switch1(config)#interface fa0/12
Switch1(config-if)#switchport mode access
Switch1(config-if)#switchport port-security maximum 2
Switch1(config-if)#switchport port-security violation shutdown
Switch1(config-if)#no shut Switch1(config-if)#end
Switch1#copy run start
What features can protect the data plane? (Choose three.)
Correct Answer: A,D,F
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which two options are symmetric-key algorithms that are recommended by Cisco? (Choose two.)
Correct Answer: C,D
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Refer to the exhibit.

What does the option secret 5 in the username global configuration mode command indicate about the user password?

What does the option secret 5 in the username global configuration mode command indicate about the user password?
Correct Answer: E
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which security zone is automatically defined by the system?
Correct Answer: B
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
Which statement describes a result of securing the Cisco IOS image using the Cisco IOS image resilience feature?
Correct Answer: E
Vote an answer
Explanation: Only visible for EduDump members. You can sign-up / login (it's free).
0
0
0
10
