CCNA Exam Answers Network Security FAQ Logging and Auditing

1. www.ConfigRouter.com Network​​Security​​FAQ:​​Logging​​and​​Auditing Q1.​​List​​the​​various​​destinations​​to​​which​​the​​logging​​process​​can​​send​​logging​​messages. Answer:​​The​​logging​​process​​can​​send​​logging​​messages​​to​​the​​following​​destinations: Logging​​buffer Terminal​​lines SYSLOG​​server Console​​port http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q2.​​What​​is​​SYSLOG? Answer:​​SYSLOG​​is​​a​​widely​​used​​protocol​​that​​can​​be​​used​​to​​view​​the​​reported​​status​​and events​​from​​a​​device.​​By​​installing​​a​​SYSLOG​​server​​daemon​​on​​a​​PC,​​you​​can​​check​​the status​​and​​event​​messages​​sent​​to​​that​​server​​from​​all​​devices​​that​​are​​configured​​to​​use​​that SYSLOG​​server. http://www.configrouter.com/network-security-faq-logging-auditing-7529/ http://www.configrouter.com/ccna-exam-router-7057/ https://configrouternotes.blogspot.in  https://configrouter.tumblr.com/  https://in.pinterest.com/phaniconfig/ccna-online-training/  https://configrouternotes.wordpress.com/  https://twitter.com/PhaniConfig  https://trello.com/configrouter  http://flip.it/y5znjX  https://www.reddit.com/user/phani_config/  https://www.scoop.it/t/ccna-exam-answers  http://feeds.feedburner.com/ConfigRouter    CCNA​ ​200-125​ ​Dump​ ​With​ ​Questions​ ​​ ​and​ ​Answers​ ​with​ ​Explanation  CCNA​ ​NetAcad​ ​Training  CCNA​ ​RS​ ​Training  CCNA​ ​Cyber​ ​Ops​ ​Training  CCNA​ ​Data​ ​Center​ ​Training  CCNA​ ​Security​ ​Training https://www.youtube.com/c/CiscoNetworkingVideos

2. www.ConfigRouter.com Nexus​​OS​​Basics​​and​​Fundamentals​​Complete​​Video​​Course https://www.youtube.com/watch?v=pwn0sT4pOEo&list=PL9UP_4zHScPw49YXOCkK9UFRbPP S55RD2 CCNA​​Cyber​​Ops​​SECFND​​210-250​​Complete​​Video​​Course https://www.youtube.com/watch?v=eT88kco4u5M&list=PL9UP_4zHScPxTqWXRTbTHOUZ4IH BfItpZ CCNA​​Wireless​​200-355​​Complete​​Video​​Course https://www.youtube.com/watch?v=yNnGavnlTZ0&list=PL9UP_4zHScPweZMvKm2mhucuF0X- kO5jV CCNA​​Cloud​​CLDADM​​210-455​​Complete​​Video​​Course https://www.youtube.com/watch?v=GjD27VyOYEQ&list=PL9UP_4zHScPz35gaincmzptwnH1cB M8Oj CCNA​​Data​​Center​​DCICT​​200-155​​Complete​​Video​​Course https://www.youtube.com/watch?v=QMe8ZgviyZ4&list=PL9UP_4zHScPwrrIVgNHW8c2weI-pIgF DL CCNA​​Data​​Center​​DCICN​​200-150​​Complete​​Video​​Course https://www.youtube.com/watch?v=VAJv3C4BgjE&list=PL9UP_4zHScPyjupWBcyODSaJjlR7Se Ik- CCNA​​Cloud​​CLDFND​​200-451​​Complete​​Video​​Course https://www.youtube.com/watch?v=C3SdnXLAA7M&list=PL9UP_4zHScPy8PX3z55iFF0rW66n- 1PDf Q3.​​Information​​at​​different​​warning​​levels​​is​​sent​​to​​a​​SYSLOG​​server.​​List​​the​​different​​warning levels. Answer:​​The​​following​​table​​lists​​the​​different​​warning​​levels. http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q4.​​SNMP​​works​​on​​which​​layer​​of​​the​​OSI​​model? a.​​Network​​layer b.​​Session​​layer c.​​Application​​layer d.​​Datalink​​layer Answer:​​c.​​SNMP​​works​​on​​the​​application​​layer.

3. www.ConfigRouter.com http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q5:​​Explain​​the​​difference​​between​​traps​​and​​informs​​when​​talking​​about​​SNMP​​notifications. Answer:​​The​​difference​​between​​a​​trap​​and​​an​​inform​​request​​is​​that​​a​​trap​​is​​unreliable​​and​​an inform​​request​​is​​not.​​If​​a​​manager​​does​​not​​receive​​an​​inform​​request,​​it​​does​​not​​send​​a response​​to​​the​​agent.​​The​​manager​​sends​​a​​response​​only​​when​​an​​inform​​request​​is​​received. The​​advantage​​of​​using​​a​​trap​​is​​that​​it​​consumes​​less​​resources​​on​​a​​router. http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q6.​​When​​creating​​an​​access​​control​​for​​an​​SNMP​​community,​​which​​optional​​parameters​​can be​​configured​​to​​make​​it​​more​​secure? Answer:​​The​​following​​optional​​parameters​​can​​be​​configured​​to​​make​​an​​access​​control​​for​​an SNMP​​community​​more​​secure: An​​access​​list​​of​​the​​SNMP​​managers​​that​​are​​permitted​​to​​use​​the​​community​​string​​to​​gain access A​​MIB​​view,​​which​​defines​​the​​subset​​of​​all​​MIB​​objects​​accessible​​to​​the​​given​​community Read​​and​​write​​or​​read-only​​access http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q7.​​What​​is​​the​​show​​snmp​​user​​command​​used​​for? Answer:​​The​​show​​snmp​​user​​command​​is​​used​​to​​display​​the​​information​​about​​each​​SNMP username​​in​​the​​SNMP​​user​​table. http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q8.​​What​​is​​RMON,​​and​​when​​is​​it​​used? Answer:​​RMON​​stands​​for​​remote​​monitoring,​​and​​it​​can​​be​​used​​in​​conjunction​​with​​SNMP​​to monitor​​traffic​​using​​alarms​​and​​events.​​With​​RMON,​​you​​can​​identify​​activity​​on​​individual nodes​​and​​also​​monitor​​all​​nodes​​and​​their​​interaction​​on​​a​​LAN​​segment.​​When​​used​​in conjunction​​with​​the​​SNMP​​agent​​on​​a​​router,​​RMON​​allows​​you​​to​​view​​both​​traffic​​that​​flows through​​the​​router​​and​​segment​​traffic​​not​​necessarily​​destined​​for​​the​​router. http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q9.​​What​​can​​be​​measured​​using​​SAA? Answer:​​SAA​​measures​​the​​following: Network​​delay​​or​​latency

4. www.ConfigRouter.com Packet​​loss Network​​delay​​variation​​(jitter) Availability One-way​​latency Website​​download​​time Network​​statistics http://www.configrouter.com/network-security-faq-logging-auditing-7529/ Q10.​​What​​command​​is​​used​​to​​start​​SAA​​operation​​3​​immediately​​and​​to​​set​​the​​duration​​of that​​operation​​for​​30​​seconds? Answer:​​The​​following​​command​​is​​used​​to​​start​​SAA​​operation​​3​​immediately​​and​​to​​set​​the duration​​of​​that​​operation​​for​​30​​seconds: http://www.configrouter.com/network-security-faq-logging-auditing-7529/