CCNA Discovery 2 Module 3 Exam

1. Which two benefits can be gained by locating network equipment in a telecommunications closet, rather than in a user area? (Choose two.)

• improved physical security

• centralized cable management



2. Which three issues should be noted on the technician's site survey report? (Choose three.)

• unlabeled cables

• poor physical security of network devices

• lack of UPS for critical devices



3. Which two types of cable are used for initial router configuration? (Choose two.)


• rollover cable

• console cable


4. In addition to the inventory sheet, what other information about the hosts and networking equipment should be documented by the on-site technician while performing the site survey?

• any planned growth anticipated in the near future



5.
1

Refer to the exhibit. What type of device is used to connect two networks?

• router



6. It is said that the goal for availability of a communications system is "five-9s". What is meant by this?

• A network needs to be available 99.999% of the time. \

7. What three things are included in a logical topology document? (Choose three.)

• the path that the data takes through a network

• the device names and Layer 3 addressing information
• the location of routing, network address translation, and firewall filtering


8. Which device has the ability to break up broadcast and collision domains?


• router


9. Why is it important to review the results of an on-site survey report with the customer before beginning the network design?

• to inform the customer of how much time the upgrade will take

• to discuss the implementation schedule for the new equipment

• to verify that the report accurately describes the current network and any plans for expansion

• to layout the new network design and discuss possible equipment upgrades and replacements


10. A client requires a networking device that is capable of expansion to suit growing network demands. What type of device will suit this requirement?

• a networking device with ports that can be activated and deactivated

• a networking device with a modular physical configuration

• a networking device with the ability to be turned off remotely

• a networking device with a cost per port that is as high as possible


11. What does the use of redundant network components supply to a network?

• reliability


12. What is the benefit for a company to use an ISR router?

• An ISR provides the functionality of a switch, router, and firewall in one device.

.


13. Which three items are typically found in an MDF? (Choose three.)

• user workstations

• switches and routers

• network equipment racks
• the point of presence



14. What are two advantages of having ISP-managed services? (Choose two.)

• can guarantee up to 99.999% availability

• increases availability of help desk services



15. A manufacturing company is in the process of a network upgrade. Which two statements are true about the phases of the upgrade process? (Choose two.)

• Phase 1 is used to determine network requirements.


• Phase 3 is based on an implementation schedule that allows extra time for unexpected events.



16. When designing a network upgrade, which two tasks should the onsite technician perform? (Choose two.)

• investigate and document the physical layout of the premises

• perform a site survey to document the existing network structure


17. What is the term for the location at the customer premise where the customer network physically connects to the Internet through a telecommunications service provider?

• point of presence



18.


2

to the exhibit. Which type of twisted pair cable is used between each device?


• A=console, B=straight, C=straight, D=crossover, E=crossover



19. In what two ways will entering into a managed service agreement with an ISP for a network upgrade affect the costs that are incurred by the customer? (Choose two.)

• Network upgrade and maintenance costs will become predictable.

• The company will not need to spend a large amount of money to purchase the equipment upfront.


20. Which type of cable has a solid copper core with several protective layers including PVC, braided wire shielding, and a plastic covering?


• coaxial



21. What must be added when a network expands beyond the coverage area of the current telecommunications room?

• IDF

CCNA Discovery 2 Module 2 Exam

1. Which two functions are provided by the upper layers of the OSI model? (Choose two.)

• initiating the network communication process
• encrypting and compressing data for transmission


2. Which is a function of the transport layer of the OSI model?

• formats and encodes data for transmission

3. Which common Layer 1 problem can cause a user to lose connectivity?

• loose network cable

4. Which three command line utilities are most commonly used to troubleshoot issues at Layer 3? (Choose three.)

• ping

• ipconfig
• Traceroute


5. Which address is used by the router to direct a packet between networks?

• destination IP address


6. What is the correct encapsulation order when data is passed from Layer 1 up to Layer 4 of the OSI model?

• bits, frames, packets, segments

7. What are two goals of the ISP help desk? (Choose two.)


• network optimization


• customer retention



8. In what two ways do Level 1 and Level 2 help desk technicians attempt to solve a customer's problems? (Choose three.)

• talking to the customer on the telephone

• using various web tools


• with remote desktop sharing applications


9. A customer calls the help desk about setting up a new PC and cable modem and being unable to access the Internet. What three questions would the technician ask if the bottom-up troubleshooting approach is used? (Choose three.)

• Is the NIC link light blinking?

• Is the network cable properly attached to the modem?
• Is the Category 5 cable properly connected to the network slot on the PC?



10. A customer calls to report a problem accessing an e-commerce web site. The help desk technician begins troubleshooting using a top-down approach. Which question would the technician ask the customer first?

• Can you access other web sites?



11. Which statement describes the process of escalating a help desk trouble ticket?

• When the problem is solved, all information is recorded on the trouble ticket for future reference.


12. What are two functions of the physical layer of the OSI model? (Choose two.)

• converting data to bits


• signal generation


13. A customer calls the ISP help desk after setting up a new PC with a cable modem but being unable to access the Internet. After the help desk technician has verified Layer 1 and Layer 2, what are three questions the help desk technician should ask the customer? (Choose three.)

• What is your subnet mask?
• What is your IP address?

• Can you ping the default gateway?



14. Which scenario represents a problem at Layer 4 of the OSI model?

.

• A firewall filtering traffic addressed to TCP port 25 on an email server.

15. What are two basic procedures of incident management? (Choose two.)

• opening a trouble ticket

• adhering to a problem-solving strategy



16. Which level of support is supplied by an ISP when providing managed services?

• Level 3



17. What is the first step that is used by a help desk technician in a systematic approach to helping a customer solve a problem?


• define the problem

18. A network technician has isolated a problem at the transport layer of the OSI model. Which question would provide further information about the problem?

• Do you have a firewall that is configured on your PC?



19. An ISP help desk technician receives a call from a customer who reports that no one at their business can reach any websites, or get their e-mail. After testing the communication line and finding everything fine, the technician instructs the customer to run nslookup from the command prompt. What does the technician suspect is causing the customer's problem?


• failure of DNS to resolve names to IP addresses


20. Which layers of the OSI model are commonly referred to as the upper layers?

• application, presentation, session

CCNA Discovery 2 Module 1 Exam Answers Version 4.0

1.    Which two things can be determined by using the ping command? (Choose two.)
• the number of routers between the source and destination device
• the IP address of the router nearest the destination device
• the average time it takes a packet to reach the destination and for the response to return to the source
• whether or not the destination device is reachable through the network
• the average time it takes each router in the path between source and destination to respond

Jawab: 

·         the average time it takes a packet to reach the destination and for the response to return to the source

·         whether or not the destination device is reachable through the network

2.   What are three main types of high-bandwidth connection options used by medium- to large-sized businesses? (Choose three.)
• DSL
• cable modem
• Ethernet
• metro Ethernet
• T1
• T3

Jawab:

·         metro Ethernet

·         T1

·         T3

3.      What is the maximum T1 transmission speed?
• 56 kbps
• 128 kbps
• 1.544 Mbps
• 2.4 Mbps

Jawab:

1.544 Mbps

4.   Which of the following start the test of destination reachability?
• echo request issued by source
• echo reply issued by source
• echo request issued by destination
• echo reply issued by destination

Jawab:

echo request issued by destination 

5.   Which statement describes a function of a Tier 1 ISP?
• peers with other similarly sized ISPs to form the global Internet backbone
• uses the services of Tier 3 ISPs to connect to the global Internet backbone
• pays Tier 2 ISPs for transit services to connect across continents
• limits the offered services to small geographic areas

Jawab:

     peers with other similarly sized ISPs to form the global Internet backbone

 

6.    At which point do individuals and small businesses connect directly to the ISP network to obtain Internet access?
• at a POP
• at an IXP
• at a Metro Ethernet link
• on the ISP extranet
Jawab:

at a POP

7.   What information is contained in the numbered RFCs maintained by the IETF?
• the rules for acceptable use of websites and e-mail
• the descriptions of various hardware components that connect to the Internet
• the specifications and rules for how devices communicate over an IP network
• the standards for cabling and wiring for local Ethernet networks
Jawab:

the specifications and rules for how devices communicate over an IP network

8.   Which network support services team is responsible for testing a new customer connection and for monitoring the ongoing operation of the link?"
• customer service
• help desk
• network operations
• on-site installation
Jawab:

network operations

9.  Which network support services team identifies whether the client site has existing network hardware and circuits installed?
• customer service
• help desk
• network operations
• planning and provisioning
Jawab:

planning and provisioning

10.  Which ISP network support systems team will typically contact the customer once a new circuit is ready and guide the customer in setting up passwords and other account information?
• help desk
• customer service
• network operations center
• on-site installation team
• planning and provisioning
Jawab:

help desk 

11.  What feature allows network devices to be scalable?
• a fixed number of interfaces
• ease of repair
• modularity
• low maintenance requirements
• low cost
Jawab:

modularity 

12.  Which command generated this output?
• 1 12.0.0.2 4 msec 4 msec 4 msec
• 2 23.0.0.3 20 msec 16 msec 16 msec
• 3 34.0.0.4 16 msec 18 msec 16 msec
• Router# traceroute 34.0.0.4
• Router# nslookup 34.0.0.4
• Router# ping 34.0.0.4
• Router# telnet 34.0.0.4
Jawab:

Router# traceroute 34.0.0.4

13.   Which network utility helps determine the location of network problems and identifies routers that packets travel across?
• ping
• ipconfig
• traceroute
• ixp
Jawab:

traceroute 

14.  What interconnects the Internet backbone?
• gateway routers
• IXPs
• POPs
• satellite dishes
Jawab:

IXPs

15.   What units are used to measure Internet bandwidth?
• bits per second
• bytes per second
• hertz
• megabytes per second
• packets per second
jawab:

bits per second

16.  The IT manager of a medium-sized business wishes to house the company-owned web servers in a facility that offers round-the-clock controlled access, redundant power, and high-bandwidth Internet access. Which ISP service will fulfill this need?
• web hosting
• planning and provisioning
• application hosting
• equipment colocation
• Tier 1 ISP services
Jawab:

equipment colocation

17.  What is the purpose of an RFC?
• to provide the connection point for multiple ISPs to the Internet
• to document the development and approval of an Internet standard
• to connect a business to an ISP
• to provide data communication services to ISP customers
• to monitor network performance and connection status of ISP clients
Jawab:

to document the development and approval of an Internet standard

18.  When did the Internet become available for use by businesses and consumers?
• 1979
• 1984
• 1991
• 1999
• 2000
Jawab:

1991

19.   What was the original purpose of the Internet?
• voice communication
• marketing
• research
• commerce

Jawab:

Research

20.  What three support service teams are commonly found within an ISP? (Choose three.)
• help desk
• computer support
• application readiness
• network operations center
• planning and provisioning
• implementation and documentation

      Jawab:

·         help desk

·         network operations center

·         planning and provisioning

CCNA Discovery 1.9

CCNA Discovery 1 Module 9 Exam Answers Version 4.0
1. What should a network administrator do first after receiving a call from a user who cannot access the company web server?
• Reboot the web server.
• Replace the NIC of the computer.
• Ask the user to log off and log on again.
• Ask the user what URL has been typed and what error message displays.

2. A customer called the cable company to report that the Internet connection is unstable. After trying several configuration changes, the technician decided to send the customer a new cable modem to try. What troubleshooting technique does this represent?
• top-down
• bottom-up
• substitution
• trial-and-error
• divide-and-conquer

3. Only one workstation on a particular network cannot reach the Internet. What is the first troubleshooting step if the divide-and-conquer method is being used?
• Check the NIC, and then check the cabling.
• Check the workstation TCP/IP configuration.
• Test all cables, and then test layer by layer up the OSI model.
• Attempt to Telnet, and then test layer by layer down the OSI model.

4. Which two troubleshooting techniques are suitable for both home networks and large corporate networks? (Choose two.)
• having a backup ISR
• running network monitoring applications
• documenting the troubleshooting process
• keeping a record of system upgrades and software versions
• keeping spare switches, routers, and other equipment available 

5. Identify two physical-layer network problems. (Choose two.)
• hardware failure
• software configuration
• devices not able to ping
• loose cable connections
• device driver configuration

6. Which ipconfig command requests IP configuration from a DHCP server?
• ipconfig
• ipconfig /all
• ipconfig /renew
• ipconfig /release

7. What command is used to determine the location of delay for a packet traversing the Internet?
• ipconfig
• netstat
• nslookup
• ping
• tracert

8. What command is used to determine if a DNS server is providing name resolution?
• ipconfig
• netstat
• nslookup
• tracert
9. Which troubleshooting method begins by examining cable connections and wiring issues?
• top-down
• bottom-up
• substitution
• divide-and-conquer

10. A technician suspects that a Linksys integrated router is the source of a network problem. While troubleshooting, the technician notices a blinking green activity LED on some of the ports. What does this indicate?
• Self-diagnostics have not completed.
• The power supply is the source of the problem.
• The ports are operational and are receiving traffic.
• The ports are operational, but no traffic is flowing.
• There are no cables plugged into those ISR ports.
• The ports have cables plugged in, but they are not functional.

11. A PC is plugged into a switch and is unable to connect to the network. The UTP cable is suspected. What could be the problem?
• A straight-through cable is being used
• The connectors at both ends of the cable are RJ-45.
• The RJ-45 connectors are crimped onto the cable jacket.
• A crossover cable is being used.

12. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless. 

13. Which three settings must match on the client and access point for a wireless connection to occur? (Choose three.)
• SSID
• authentication
• MD5 checksum
• antennae type
• encryption key
• MAC address filters

14. A technician is troubleshooting a security breach on a new wireless access point. Which three configuration settings make it easy for hackers to gain access? (Choose three.)
• configuring NAT
• broadcasting the SSID
• using open authentication
• enabling MAC address filters
• using the default internal IP address
• using DHCP to provide IP addresses

15. Refer to the graphic. The wireless host cannot access the Internet, but the wired host can. What is the problem?
• The host WEP key is incorrect.
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The integrated router internal IP address is incorrect.
• The integrated router Internet IP address is incorrect.

16. Refer to the graphic. What configuration is incorrect in the network shown?
• The host IP address is incorrect.
• The host subnet mask is incorrect.
• The host default gateway is incorrect.
• The wired connection is the wrong type of cable.
• The Linksys integrated router does not support wireless.

17. When acting as a DHCP server, what three types of information can an ISR provide to a client? (Choose three.)
• physical address
• MAC address
• default gateway
• static IP address
• dynamic IP address
• DNS server address

18. What two items could be checked to verify connectivity between the router and the ISP? (Choose two.)
• router status page
• wireless card settings
• router operating system version
• local host operating system version
• connectivity status as indicated by LEDs

19. A technician is unsuccessful in establishing a console session between a PC and a Linksys integrated router. Both devices have power, and a cable is connected between them. Which two troubleshooting steps could help to diagnose this problem? (Choose two.)
• Ensure the correct cable is used.
• Ensure the SSID is the same on both devices.
• Ensure both devices have the same IP address.
• Ensure both devices have different subnet masks.
• Ensure the encryption type on both devices match.
• Ensure the link status LED on the integrated router is lit.

20. Network baselines should be performed in which two situations? (Choose two.)
• after the network is installed and running optimally
• after a virus outbreak is discovered on the network
• after major changes are implemented on the network
• after several computers are added to the network
• at the end of the work week

21. Typically, help desk personnel assist end users in which two tasks? (Choose two.)
• identifying when the problem occurred
• determining if other users are currently logged into the computer
• updating network diagrams and documentation
• implementing the solution to the problem
• running a network baseline test
• determining the cost of fixing the problem

22. How does remote-access software help in the troubleshooting process?
• Remote access uses a live chat feature.
• Users have to be present so that they can view LEDs and change cables if necessary.
• Diagnostics can be run without a technician being present at the site.
• FAQs can be consulted more easily.

23. Which two items should be added to the documentation following a troubleshooting event? (Choose two.)
• final resolution
• repetitive measures
• number of people involved in the problem
• accurate current network infrastructure diagrams
• results of successful and unsuccessful troubleshooting steps

CCNA Discovery 1.8

CCNA Discovery 1 Module 8
1. Identify three techniques used in social engineering. (Choose three.)
• fishing
• vishing
• phishing
• spamming
• pretexting
• junk mailing
2. During a pretexting event, how is a target typically contacted?
• by e-mail
• by phone
• in person
• through another person
3. While surfing the Internet, a user notices a box claiming a prize has been won. The user opens the box unaware that a program is being installed. An intruder now accesses the computer and retrieves personal information. What type of attack occurred?
• worm
• virus
• Trojan horse
• denial of service
4. What is a major characteristic of a Worm?
• malicious software that copies itself into other executable programs
• tricks users into running the infected software
• a set of computer instructions that lies dormant until triggered by a specific event
• exploits vulnerabilities with the intent of propagating itself across a network
5. A flood of packets with invalid source-IP addresses requests a connection on the network. The server busily tries to respond, resulting in valid requests being ignored. What type of attack occurred?
• Trojan horse
• brute force
• ping of death
• SYN flooding

6. What type of advertising is typically annoying and associated with a specific website that is being visited?
• adware
• popups
• spyware
• tracking cookies
7. What is a widely distributed approach to marketing on the Internet that advertises to as many individual users as possible via IM or e-mail?
• brute force
• spam
• spyware
• tracking cookies
8. What part of the security policy states what applications and usages are permitted or denied?
• identification and authentication
• remote access
• acceptable use
• incident handling
9. Which statement is true regarding anti-virus software?
• Only e-mail programs need to be protected.
• Only hard drives can be protected.
• Only after a virus is known can an anti-virus update be created for it.
• Only computers with a direct Internet connection need it.
10. Which two statements are true concerning anti-spam software? (Choose two.)
• Anti-spam software can be loaded on either the end-user PC or the ISP server, but not both.
• When anti-spam software is loaded, legitimate e-mail may be classified as spam by mistake.
• Installing anti-spam software should be a low priority on the network.
• Even with anti-spam software installed, users should be careful when opening e-mail attachments.
• Virus warning e-mails that are not identified as spam via anti-spam software should be forwarded to other users immediately.
11. What term is used to describe a dedicated hardware device that provides firewall services?
• server-based
• integrated
• personal
• appliance-based

12. Which acronym refers to an area of the network that is accessible by both internal, or trusted, as well as external, or untrusted, host devices?
• SPI
• DMZ
• ISR
• ISP
13. Which statement is true about port forwarding within a Linksys integrated router?
• Only external traffic that is destined for specific internal ports is permitted. All other traffic is denied.
• Only external traffic that is destined for specific internal ports is denied. All other traffic is permitted.
• Only internal traffic that is destined for specific external ports is permitted. All other traffic is denied.
• Only internal traffic that is destined for specific external ports is denied. All other traffic is permitted.
14. To which part of the network does the wireless access point part of a Linksys integrated router connect?
• DMZ
• external
• internal
• a network other than the wired network
15. Refer to the graphic. What is the purpose of the Internet Filter option of Filter IDENT (Port 113. on the Linksys integrated router?
• to require a user ID and password to access the router
• to prevent outside intruders from attacking the router through the Internet
• to require a pre-programmed MAC address or IP address to access the router
• to disable tracking of internal IP addresses so they cannot be spoofed by outside devices
16. What statement is true about security configuration on a Linksys integrated router?
• A DMZ is not supported.
• The router is an example of a server-based firewall.
• The router is an example of an application-based firewall.
• Internet access can be denied for specific days and times.

17. What environment would be best suited for a two-firewall network design?
• a large corporate environment
• a home environment with 10 or fewer hosts
• a home environment that needs VPN access
• a smaller, less congested business environment
18. What is one function that is provided by a vulnerability analysis tool?
• It provides various views of possible attack paths.
• It identifies missing security updates on a computer.
• It identifies wireless weak points such as rogue access points.
• It identifies all network devices on the network that do not have a firewall installed.
• It identifies MAC and IP addresses that have not been authenticated on the network.
19. Many best practices exist for wired and wireless network security. The list below has one item that is not a best practice. Identify the recommendation that is not a best practice for wired and wireless security.
• Periodically update anti-virus software.
• Be aware of normal network traffic patterns.
• Periodically update the host operating system.
• Activate the firewall on a Linksys integrated router.
• Configure login permissions on the integrated router.
• Disable the wireless network when a vulnerability analysis is being performed.
20. What best practice relates to wireless access point security?
• activation of a popup stopper
• a change of the default IP address
• an update in the antivirus software definitions
• physically securing the cable between the access point and client
21. Refer to the graphic. In the Linksys Security menu, what does the SPI Firewall Protection option Enabled provide?
• It prevents packets based on the application that makes the request.
• It allows packets based on approved internal MAC or IP addresses.
• It requires that packets coming into the router be responses to internal host requests.
• It translates an internal address or group of addresses into an outside, public address

CCNA discovery 1.7

CCNA Discovery 1 Module 7 Exam Answers Version 4.0

1. Why is IEEE 802.11 wireless technology able to transmit further distances than Bluetooth technology?
• transmits at much lower frequencies
• has higher power output
• transmits at much higher frequencies
• uses better encryption methods

2. What are three advantages of wireless over wired technology? (Choose three.)
• more secure
• longer range
• anytime, anywhere connectivity
• easy and inexpensive to install
• ease of using licensed air space
• ease of adding additional devices

3. What are two benefits of wireless networking over wired networking? (Choose two.)
• speed
• security
• mobility
• reduced installation time
• allows users to share more resources
• not susceptible to interference from other devices

4. A technician has been asked to provide wireless connectivity to the wired Ethernet network of a building. Which three factors affect the number of access points needed? (Choose three.)
• the size of the building
• the number of solid interior walls in the building
• the presence of microwave ovens in several offices
• the encryption method used on the wireless network
• the use of both Windows and Appletalk operating systems
• the use of shortwave or infrared on the AP

5. Why is security so important in wireless networks?
• Wireless networks are typically slower than wired networks.
• Televisions and other devices can interfere with wireless signals.
• Wireless networks broadcast data over a medium that allows easy access.
• Environmental factors such as thunderstorms can affect wireless networks.

6. What does the Wi-Fi logo indicate about a wireless device?
• IEEE has approved the device.
• The device is interoperable with all other wireless standards.
• The device is interoperable with other devices of the same standard that also display the Wi-Fi logo.
• The device is backwards compatible with all previous wireless standards.

7. Which statement is true concerning wireless bridges?
• connects two networks with a wireless link
• stationary device that connects to a wireless LAN
• allows wireless clients to connect to a wired network
• increases the strength of a wireless signal

8. Which WLAN component is commonly referred to as an STA?
• cell
• antenna
• access point
• wireless bridge
• wireless client

9. Which statement is true concerning an ad-hoc wireless network?
• created by connecting wireless clients in a peer-to-peer network
• created by connecting wireless clients to a single, centralized AP
• created by connecting multiple wireless basic service sets through a distribution system
• created by connecting wireless clients to a wired network using an ISR

10. Refer to the graphic. In the Wireless menu option of a Linksys integrated router, what does the Network Mode option Mixed mean?
• The router supports encryption and authentication.
• The router supports both wired and wireless connections.
• The router supports 802.11b, 802.11g, and 802.11n devices.
• The router supports connectivity through infrared and radio frequencies.

11. Refer to the graphic. In the Wireless menu of a Linksys integrated router, what configuration option allows the presence of the access point to be known to nearby clients?
• Network Mode
• Network Name (SSID)
• Radio Band
• Wide Channel
• Standard Channel
• SSID Broadcast

12. Which two statements about a service set identifier (SSID) are true? (Choose two.)
• tells a wireless device to which WLAN it belongs
• consists of a 32-character string and is not case sensitive
• responsible for determining the signal strength
• all wireless devices on the same WLAN must have the same SSID
• used to encrypt data sent across the wireless network

13. Which two statements characterize wireless network security? (Choose two.)
• Wireless networks offer the same security features as wired networks.
• Wardriving enhances security of wireless networks.
• With SSID broadcast disabled, an attacker must know the SSID to connect.
• Using the default IP address on an access point makes hacking easier.
• An attacker needs physical access to at least one network device to launch an attack.

14. What type of authentication does an access point use by default?
• Open
• PSK
• WEP
• EAP

15. Which statement is true about open authentication when it is enabled on an access point?
• requires no authentication
• uses a 64-bit encryption algorithm
• requires the use of an authentication server
• requires a mutually agreed upon password

16. What are two authentication methods that an access point could use? (Choose two.)
• WEP
• WPA
• EAP
• ASCII
• pre-shared keys

17. What is the difference between using open authentication and pre-shared keys?
• Open authentication requires a password. Pre-shared keys do not require a password.
• Open authentication is used with wireless networks. Pre-shared keys are used with wired networks.
• Pre-shared keys require an encrypted secret word. Open authentication does not require a secret word.
• Pre-shared keys require a MAC address programmed into the access point. Open authentication does not require this programming.

18. What term describes the encoding of wireless data to prevent intercepted data from being read by a hacker?
• address filtering
• authentication
• broadcasting
• encryption
• passphrase encoding

19. What access-point feature allows a network administrator to define what type of data can enter the wireless network?
• encryption
• hacking block
• traffic filtering
• MAC address filtering
• authentication

20. What are the two WEP key lengths? (Choose two.)
• 8 bit
• 16 bit
• 32 bit
• 64 bit
• 128 bit

21. Complete the following sentence: WEP is used to ______ , and EAP is used to _____ wireless networks.
• encrypt; authenticate users on
• filter traffic; select the operating frequency for
• identify the wireless network; compress data on
• create the smallest wireless network; limit the number of users on

Tugas CCNA lab 7.3.5

Objectives

• Create a security plan for a home network.
• Configure the wireless access point (AP) portion of a multi-function device using security best practices.

Background / Preparation

A well-planned security implementation is critical to the safety of a wireless network. This lab goes over the steps that must be taken to ensure the safety of the network using the following scenario. You have just purchased a Linksys WRT300N wireless router, and you want to set up a small network in your

home. You selected this router because the IEEE 802.11n specification claims that it has 12 times the speed of an 802.11g and 4 times the range. Because the 802.11n uses 2.4 GHz, it is backward compatible with both the 802.11b and 802.11g and uses MIMO (multiple-in, multiple-out) technology.

You should enable security mechanisms before connecting your multi-function device to the Internet or any wired network. You should also change the default values provided, because they are well-known values that are easily obtainable on the Internet. The following resources are required:

• Windows-based computer
• Linksys WRT300N
• Straight-through Ethernet cable

Step 1: Plan the security for your home network

1. List at least six security best practices that you should implement to secure your multi-function device and wireless network.Jawaban:1) Change default values for the SSID, usernames and passwords,2) Disable broadcast SSID, 3) Configure MAC Address Filtering, 4) Configure encryption using WEP or WPA, 5) Configure authentication ,6) Configure traffic filtering
2. Describe what the security risk is for each item. Jawaban: 1) Passwords are changed to prevent neighbors or other people from logging in to your router. 2) SSID should be changed to a unique name. 3) SSID broadcasting is disabled so that the SSID name is not broadcasted to others in range of your network. 4) Encryption and authentication prevents hackers from gaining access to the network and intercepting messages. 5) MAC filtering keeps unwanted computers from associating with the AP

Step 2: Connect a computer to the multi-function device and log in to the web-based utility

1. Connect your computer (Ethernet NIC) to the multi-function device (port 1 on the Linksys WRT300N) by using a straight-through cable.
2. The default IP address of the Linksys WRT300N is 192.168.1.1, and the default subnet mask is 255.255.255.0. The computer and Linksys device must be on the same network to communicate with each other. Change the IP address of the computer to 192.168.1.2, and verify that the subnet mask is 255.255.255.0. Enter the internal address of the Linksys device (192.168.1.1) as the default gateway. Do this by clicking, Start > Control Panel > Network Connections. Right click on the wireless connection and choose Properties. Select the Internet Protocol (TCP/IP) and enter the addresses as shown below.
3. Open a web browser, such as Internet Explorer, Netscape, or Firefox and enter the default IP address of the Linksys device (192.168.1.1) into the address field and press Enter.
4. A screen appears, requesting your user name and password.
5. Leave the User name field blank and enter admin for the password. It is the default password on the Linksys device. Click OK. Remember that passwords are case-sensitive.
6. As you make the necessary changes on the Linksys device, click Save Settings on each screen to save the changes or click Cancel Changes to keep the default settings.

Step 4: Change the Linksys device password

1. The initial screen displayed is the Setup > Basic Setup screen.
2. Click the Administration tab. The Management tab is selected by default.
3. Type in a new password for the Linksys device, and then confirm the password. The new password must not be more than 32 characters and must not include any spaces. The password is required to access the Linksys device web-based utility and Setup Wizard.
4. The Web Utility Access via Wireless option is enabled by default. You may want to disable this feature to further increase security.
5. Click the Save Settings button to save the information. NOTE: If you forget your password, you can reset the Linksys device to the factory defaults by pressing the RESET button for 5 seconds and then releasing it. The default password is admin.

Step 5: Configure the wireless security settings

1. Click the Wireless tab. The Basic Wireless Settings tab is selected by default. The Network Name is the SSID shared among all devices on your network. It must be identical for all devices in the wireless network. It is case-sensitive and must not be more than 32 characters.
2. Change the SSID from the default of linksys to a unique name. Record the name you have chosen: Student Dependant
3. Leave the Radio Band set to Auto. This allows your network to use all 802.11n, g, and b devices.
4. For SSID Broadcast, select the Disabled button to disable the SSID broadcast. Wireless clients survey the area for networks to associate with and will detect the SSID broadcast sent by the Linksys device. For added security, do not broadcast the SSID.
5. Save your settings before going to the next screen.

Step 6: Configure encryption and authentication

1. Choose the Wireless Security tab on the Wireless screen.
2. This router supports four types of security mode settings:

• WEP (Wired Equivalent Privacy)
• WPA (Wi-Fi Protected Access) Personal, which uses a pre-shared key (PSK)
• WPA Enterprise, which uses Remote Access Dial In User Service (RADIUS)
• RADIUS

1. Select WPA Personal Security Mode.
2. On the next screen, choose an Encryption algorithm.

To secure a network, use the highest level of encryption possible within the Selected Security mode. The following Security Modes and Encryption levels are listed from least secure (WEP) to most secure (WPA2 with AES)

• WEP
• WPA
• TKIP (Temporal Key Integrity Protocol)
• AES (Advanced Encryption System)
• WPA2
• TKIP
• AES

AES is only supported by newer devices that contain a co-processor. To ensure compatibility with all devices, select TKIP.

1. For authentication, enter a pre-shared key between 8 and 63 characters. This key is shared by the Linksys device and all connected devices.
2. Choose a key renewal period between 600 and 7200 seconds. The renewal period is how often the Linksys device changes the encryption key.
3. Save your settings before exiting the screen.

Step 7: Configure MAC address filtering

1. Choose the Wireless MAC Filter tab on the Wireless screen.
2. MAC address filtering allows only selected wireless client MAC addresses to have access to your network. Select the radio button to Permit PCs listed below to access the wireless network. Click the Wireless Client List button to display a list of all wireless client computers on your network.
3. The next screen allows you to identify which MAC addresses can have access to the wireless network. Click the Save to MAC Address Filter List check box for any client device you want to add, and then click the Add button. Any wireless clients, other than those in the list will be prevented from accessing your wireless network. Save your settings before exiting the screen.

Step 8: Reflection

1. Which feature that you configured on the Linksys WRT300N makes you feel the most secure and why? Answers will vary. The MAC address filter is a very restrictive method of controlling access. Jawaban: MAC address filtering uses the MAC address to identify which devices are allowed to connect to the wireless network. When a wireless client attempts to connect, or associate, with an AP it will send MAC address information. If MAC filtering is enabled, the wireless router or AP will look up its MAC address a preconfigured list. Only devices whose MAC addresses have been prerecorded in the router’s database will be allowed to connect.