Cisco 640-554 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 640-554
Exam Name/Title: Implementing Cisco IOS Network Security (IINS v2.0)
Certification Provider: Cisco
Corresponding Certification: CCNA Security

Exam Questions: 289
Updated On: May 29, 2026

Question #57

Which technology provides an automated digital certificate management system for use with IPsec?

A. Internet Key Exchange

B. public key infrastructure

C. Digital Signature Algorithm

D. ISAKMP

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #58

What must be configured before Secure Copy can be enabled?

A. SSH

B. AAA

C. TFTP

D. FTP

Discussion 0

Correct Answer: B Vote an answer

Question #59

Which two options represent a threat to the physical installation of an enterprise network? (Choose two.)

A. computer room access

B. security guards

C. surveillance camera

D. change control

E. electrical power

Discussion 0

Correct Answer: A,E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #60

By which kind of threat is the victim tricked into entering username and password information at a disguised website?

A. phishing

B. malware

C. spoofing

D. spam

Discussion 0

Correct Answer: A Vote an answer

Question #61

Which single Cisco IOS ACL entry permits IP addresses from 172.16.80.0 to 172.16.87.255?

A. permit 172.16.80.0 0.0.7.255

B. permit 172.16.80.0 0.0.248.255

C. permit 176.16.80.0 255.255.252.0

D. permit 172.16.80.0 255.255.240.0

E. permit 172.16.80.0 255.255.248.0

F. permit 172.16.80.0 0.0.3.255

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #62

Which statement about ACL operations is true?

A. The default explicit deny at the end of an access list causes all packets to be dropped.

B. The access list is evaluated one access-control entry at a time.

C. The access list is evaluated in its entirety.

D. The access list is evaluated by the most specific entry.

Discussion 0

Correct Answer: B Vote an answer

Question #63

Which three statements about applying access control lists to a Cisco router are true? (Choose three.)

A. If an access list is applied but it is not configured, all traffic passes.

B. ACLs always search for the most specific entry before taking any filtering action.

C. Router-generated packets cannot be filtered by ACLs on the router.

D. Place more specific ACL entries at the top of the ACL.

E. Place generic ACL entries at the top of the ACL to filter general traffic and thereby reduce "noise" on the network.

Discussion 0

Correct Answer: A,C,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #64

When AAA login authentication is configured on Cisco routers, which two authentication methods should be used as the final method to ensure that the administrator can still log in to the router in case the external AAA server fails? (Choose two.)

A. group RADIUS

B. if-authenticated

C. enable

D. local

E. group TACACS+

F. krb5

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #65

Which command causes a Layer 2 switch interface to operate as a Layer 3 interface?

A. no switchport

B. no switchport mode dynamic auto

C. no switchport nonnegotiate

D. switchport

Discussion 0

Correct Answer: A Vote an answer

Question #66

Which option represents a step that should be taken when a security policy is developed?

A. Determine device risk scores.

B. Implement a security monitoring system.

C. Perform quantitative risk analysis.

D. Perform penetration testing.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #67

Which option describes information that must be considered when you apply an access list to a physical interface?

A. Protocol used for filtering

B. Direction of the access group

C. Direction of the access class

D. Direction of the access list

Discussion 0

Correct Answer: B Vote an answer

Question #68

Refer to the exhibit.

Which statement is correct based on the show login command output shown?

A. The login block-for command is configured to block login hosts for 93 seconds.

B. When the router goes into quiet mode, any host is permitted to access the router via Telnet,
SSH, and
HTTP, since the quiet-mode access list has not been configured.

C. All logins from any sources are blocked for another 193 seconds.

D. Three or more login requests have failed within the last 100 seconds.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #69

Which characteristic is the foundation of Cisco Self-Defending Network technology?

A. threat control and containment

B. policy management

C. secure connectivity

D. secure network platform

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #70

Refer to the exhibit.

Which switch is designated as the root bridge in this topology?

A. switch X

B. switch Y

C. It depends on which switch came on line first.

D. Neither switch would assume the role of root bridge because they have the same default priority.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Cisco 640-554 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 640-554 exam.