2.8 Describe Network Device Management Access (Telnet, SSH, HTTP, HTTPS, Console, TACACS+/RADIUS, and Cloud Managed) 200-301 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A network engineer is deploying a new switch in a remote office. The switch is not yet configured, and the engineer wants to use a cloud management platform for ongoing management. However, the switch must first be registered with the cloud platform. Which initial access method should the engineer use to register the switch?

   • ASSH from the management network
   • BHTTP from the management network
   • CTelnet from the management network
   • DConsole access
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is deploying network devices in a remote site with no local IT staff. They want the devices to automatically receive configuration and be monitored from a central cloud platform. Which management approach should be used?

   • AOn-site management via console only.
   • BUse Telnet for remote management.
   • CSSH from a central management station over the internet.
   • DCloud-managed devices that connect to the cloud platform for provisioning and monitoring.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A network administrator is managing a switch that has both HTTP and HTTPS enabled. The administrator is accessing the web interface from a browser that warns about an untrusted certificate. The administrator must ensure secure management while minimizing the risk of man-in-the-middle attacks. What should the administrator do?

   • AUse Telnet instead of HTTPS
   • BContinue using HTTP because the warning is inconvenient
   • CInstall a trusted certificate on the switch and use HTTPS
   • DDisable HTTPS and use SSH
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A network device offers a web-based management interface. If the administrator accesses it using HTTP, which port is used by default?

   • AUDP port 69
   • BTCP port 22
   • CTCP port 443
   • DTCP port 80
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A small business uses a Cisco router's web-based management interface. The administrator notices that login credentials are being transmitted in clear text. The router supports both HTTP and HTTPS. What should the administrator do to secure web-based management?

   • AKeep HTTP enabled but restrict access to a specific management VLAN.
   • BUse Telnet instead of HTTP for web-based management.
   • CConfigure SSH on the router and continue using HTTP.
   • DEnable HTTPS and disable HTTP on the router.
   Reveal Solution Discussion Select an answer first