IOS and Security Device Manager Questions and Answers

Answer: B

Correct answer: Part of the command is missing.

There is no show serial command in IOS. The interface has to be reached through show interfaces, so the correct form is show interfaces serial 0/0 and the parser rejects serial as the first token it does not recognise. The space between the type and the number is perfectly legal - it appears in the correct command - and the error says nothing about whether the interface exists, since the command never got far enough to look.

Answer: C

Correct answer: banner motd #

The command is banner motd followed by a delimiting character - conventionally # - after which everything typed up to the next occurrence of that character becomes the message. The delimiter must not appear in the text itself. The message of the day is displayed to anyone connecting by console, Telnet or SSH, before the login prompt.

Answer: B

Correct answer: The administrator has the interface shut down.

“Administratively down” has one meaning only: the interface carries the shutdown command, which is the default state of every router interface until no shutdown is entered. It is worth distinguishing from the other two failure patterns - “down, line protocol is down” points to a physical or cabling fault, while “up, line protocol is down” points to a mismatch in encapsulation, keepalives or clocking.

Answer: B

Correct answer: There is more than one show command that starts with the letters ru .

IOS accepts any abbreviation that is unique. ru matches both running-config and rudpv1, so the parser cannot tell which was meant and reports the command as ambiguous. Adding one more letter, sh run, resolves it. That is a different error from “incomplete command”, which means the command was understood but needs more arguments.

Answer: C

The command show ip protocols will actually show you the broadcast address for each interface - too bad it isn't a possible answer. Your best answer is show interfaces, which will provide the IP address and mask for each interface.

Answer: C

Correct answer: Setup mode

With NVRAM empty there is no startup configuration to load, so on reload the router finds itself unconfigured and offers the setup dialogue - the initial configuration questions. Answering no, or pressing Ctrl+C, leaves the router at the command line with a default configuration and nothing saved.

Answer: B

Correct answer: service password-encryption

service password-encryption applies a weak, reversible cipher - type 7 - to the plaintext passwords held in the configuration, which is why the console password appears as a string of hexadecimal digits. It protects only against a glance over the shoulder: type 7 strings are trivially decoded. The enable secret is different, being an MD5 hash and not reversible at all.

Answer: A

If you see that a serial interface and the protocol are both down, then you have a Physical layer problem. If you see serial1 is up, line protocol is down, then you are not receiving (Data Link) keepalives from the remote end.

Answer: B

Correct answer: Router(config)#line vty 0 4

Two things must be right: the mode and the range. VTY lines are configured from global configuration mode, not from privileged exec and not from interface configuration mode, and the five default lines are numbered 0 to 4. There is no all keyword, and line console 0 configures a different line entirely.

Answer: C

To completely replace the running-config with the startup-config, you must reload the router. Note : You may have picked option C, which isn't a bad answer. Remember, though, it doesn't replace the configuration, it appends it.