CiscoCertified Network Associate Automation (CCNA Automation)
Domain 6Objective 7
7. Recognize Common Protocol Port Values (such as, SSH, Telnet, HTTP, HTTPS, and NETCONF) 200-901 Practice Questions (Page 1)
Part of the 6.0 Network Fundamentals domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)
29questions here
6free pages
7concepts
15%of the exam
Questions 1–5
- 1
A network engineer is configuring a new firewall policy for a DMZ. The policy must allow secure remote administration of a server (using SSH) and secure web access to the server (using HTTPS). The engineer wants to restrict traffic to only the well-known ports for these services. Which two ports should be permitted?
Select an answer first - 2
A network administrator is designing a firewall rule for a new management server. The server must be able to: (1) SSH to network devices for CLI access, (2) fetch configuration files from an internal HTTP server, and (3) send NETCONF messages to a router. The administrator wants to allow only the necessary ports. Which set of TCP destination ports should be permitted?
Select an answer first - 3
A network security team is reviewing firewall rules for a management network. The team wants to allow only encrypted management and configuration protocols. Which of the following ports should be allowed? Select all that apply.
Select an answer first - 4
A network administrator is migrating from Telnet to SSH for device management. The administrator has configured SSH on all devices and wants to enforce its use. The firewall currently allows both port 22 and port 23. To enforce SSH-only management, which port should be blocked?
Select an answer first - 5
Which protocol and port combination is associated with unencrypted remote terminal access?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.