Exam 350-701 topic 1 question 121 discussion

Actual exam question from Cisco's 350-701

Question #: 121
Topic #: 1

When configuring ISAKMP for IKEv1 Phase 1 on a Cisco IOS router, an administrator needs to input the command crypto isakmp key cisco address 0.0.0.0.
The administrator is not sure what the IP address in this command is used for. What would be the effect of changing the IP address from 0.0.0.0 to 1.2.3.4?

A. The key server that is managing the keys for the connection will be at 1.2.3.4.
B. The address that will be used as the crypto validation authority.
C. All IP addresses other than 1.2.3.4 will be allowed.
D. The remote connection will only be allowed from 1.2.3.4.

Show Suggested Answer

Suggested Answer: D 🗳️

by Anonymous983475 at Jan. 22, 2023, 2:45 p.m.

Comments

Submit Cancel

illwill

1 month, 1 week ago

"D" is the correct answer because mask is optional and only needed if the peer device is using the mask command. (Optional) Specify the subnet address of the remote peer. (The argument can be used only if the remote peer ISAKMP identity was set with its IP address.) https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/srfike.html#wp1017897

upvoted 1 times

...

gondohwe

8 months ago

the command "crypto isakamp key xxxx address x.x.x.x " is used to specify the shared secret and the peer is expected at the other end of the connecton........so D is the right choice

upvoted 2 times

...

Anonymous983475

12 months ago

I think none of the answers are correct or the question itself is wrong. If you do not add a subnet mask at the end of the command the default class is assumed. The default class for 1.2.3.4 is class A, which has mask 255.0.0.0 or 8 bits. This means that all addresses from the 1.0.0.0/8 network will be accepted for authentication with that key.

upvoted 4 times

...

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam

Exam 350-701 topic 1 question 121 discussion

Comments

illwill

gondohwe

Anonymous983475

SY0-701