350-701 Practice Test practice questions, page 19 of 28, with answer review and explanations.
Question 91
An engineer is trying to securely connect to a router and wants to prevent insecure algorithms from being used. However, the connection is failing. Which action should be taken to accomplish this goal?
Generate the RSA key using the crypto key generate rsa command.
Configure the port using the ip ssh port 22 command.
Enable the SSH server using the ip ssh server command.
Disable telnet using the no ip telnet command.
Question 92
Refer to the exhibit. Which type of authentication is in use?
POP3 authentication
SMTP relay server authentication
external user and relay mail authentication
LDAP authentication for Microsoft Outlook
Question 93
Refer to the exhibit. An organization is using DHCP Snooping within their network. A user on VLAN 41 on a new switch is complaining that an IP address is not being obtained. Which command should be configured on the switch interface in order to provide the user with network connectivity?
ip dhcp snooping limit 41
ip dhcp snooping verify mac-address
ip dhcp snooping trust
ip dhcp snooping vlan 41
Question 94
Refer to the exhibit. Traffic is not passing through IPsec site-to-site VPN on the Firepower Threat Defense appliance. What is causing this issue?
Site-to-site VPN preshared keys are mismatched.
Site-to-site VPN peers are using different encryption algorithms.
No split-tunnel policy is defined on the Firepower Threat Defense appliance.
The access control policy is not allowing VPN traffic in.
Question 95
Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?