Chapter 5 - Using Cisco Configuration Professional Flashcards Preview

Cisco CCNA Security (640-554) > Chapter 5 - Using Cisco Configuration Professional > Flashcards

Flashcards in Chapter 5 - Using Cisco Configuration Professional Deck (6):
1

What is a Gratuitous ARP?

A Gratuitous Address Resolution Protocol is an ARP broadcast in which the source and destination IP addresses are the same. Typically this is used by a host to inform the network about its IP address.

  • Gratuitous means that an ARP reply is sent without an initial request from another station. A spoofed Gratuitous ARP message can cause network mapping information to be stored incorrectly, or with the wrong device causing network malfunctions.

2

Why should you disable IP Source Route?

It is generally bad practice to allow the sender of a packet to control the path through your network. IP packets should rely on routers to properly get them from source to destination on a network.

3

True or False? Restrictions through Cisco Configuration Professional (CCP) restrict access at the command line.

FALSE

Restrictions implemented through CCP user profiles restrict access only via CCP. If the same user opens a SSH session directly on a router, the restrictions are not in affect because CCP was not used to establish the connection.

4

What does the command ip http authentication local do?

It tells the router that when people connect via HTTP or HTTPS it should request a username and password, and when it gets one to check the local database (aka the running config) to see if they shoud be allowed access.

5

When using CCP, what is meant by a "community"?

A community is a group of routers or devices that share something in common. It could be geographical location, or similar function. 

  • Remember, in CCP each community can only have 10 membes maximum.

6

What is "parameterizing" in CCP?

When you are creating a template to configure multiple routers there are some options that must be unique on each device (hostname, management IP address, etc). In the configuration template you can make these entries variables, so that when they are applied, CCP will request unique values for these options.