Cisco IOS Firewall Authentication Proxy Questions Answers

1. 

What protocol does the authentication proxy use to trigger an authentication session?

1. Telnet

2. HTTPS

3. TFTP

4. HTTP

2. 

Which two protocol authentication servers can be used with authentication proxy?

1. TACACS

2. Kerberos

3. RADIUS

4. TACACS+

3. 

Authentication proxy allows how many attempts to enter a valid user name and password?

1. 1

2. 3

3. 5

4. unlimited

4. 

True or False. User profile entries stored on the AAA server are made up of permit and deny statements used to create temporary ACL entries on the firewall router.

1. True

2. False

5. 

In the temporary ACL entry permit icmp host 192.168.1.10 host 192.168.4.2, which address probably represents the authenticated user?

1. 192.168.1.10

2. 192.168.4.2

3. It can be either on

4. There’s no way to kno

6. 

True or False. Authentication proxy is supported on all router platforms since v12.2.

1. True

2. False

7. 

In the ip auth-proxy auth-cache-time units command, what are the idle timer units?

1. Bits

2. Seconds

3. Minutes

4. Hours

8. 

Which technology does authentication proxy use to provide secure authentication?

1. HTTPS

2. DirectX

3. JavaScript

4. All of the above

9. 

According to the text, which of the following is the reason to configure CBAC with authentication proxy?

1. CBAC’s attack prevention feature

2. CBAC is so easy to configur

3. Authentication proxy doesn’t create ACEs to support returning data traffi

4. CBAC has its own authentication function

10. 

The IOS Firewall authentication proxy feature works with which technology?

1. Dial-in connection

2. Console connections

3. HTTP sessions

4. Telnet sessions

11. 

What additional IOS feature allows the authentication proxy to work with NAT services?

1. AAA Accounting

2. CBAC

3. VPN client

4. One-time passwords

12. 

Which command is not a step in setting up an IOS Firewall authentication proxy?

1. Configuring the HTTP server

2. Configuring the authentication proxy

3. Configuring AAA

4. Configuring CBAC

13. 

How many open sessions does authentication proxy support before refusing additional sessions?

1. 24

2. 40

3. 100

4. 500

14. 

When creating the inbound ACL on the firewall for authentication proxy, all traffic is typically blocked except which one of the following that’s absolutely required?

1. Outbound traffic to the AAA server

2. Local user Telnet traffic

3. Return traffic from the AAA server

4. Local user HTTP traffic

15. 

When configuring the authentication proxy features, all commands are variations of which of the following?

1. Rtr1#ip auth-proxy auth

2. Rtr1(config)#ip auth-proxy auth

3. Rtr1(config-if)#ip auth-proxy auth

4. Rtr1(config-ap)#ip auth-proxy auth