ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-701 All Questions

View all questions & answers for the 350-701 exam
Go to Exam

Exam 350-701 topic 1 question 121 discussion

Actual exam question from Cisco's 350-701
Question #: 121
Topic #: 1
[All 350-701 Questions]

When configuring ISAKMP for IKEv1 Phase 1 on a Cisco IOS router, an administrator needs to input the command crypto isakmp key cisco address 0.0.0.0.
The administrator is not sure what the IP address in this command is used for. What would be the effect of changing the IP address from 0.0.0.0 to 1.2.3.4?

  • A. The key server that is managing the keys for the connection will be at 1.2.3.4.
  • B. The address that will be used as the crypto validation authority.
  • C. All IP addresses other than 1.2.3.4 will be allowed.
  • D. The remote connection will only be allowed from 1.2.3.4.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Anonymous983475 at Jan. 22, 2023, 2:45 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
illwill
4 months, 3 weeks ago
"D" is the correct answer because mask is optional and only needed if the peer device is using the mask command. (Optional) Specify the subnet address of the remote peer. (The argument can be used only if the remote peer ISAKMP identity was set with its IP address.) https://www.cisco.com/c/en/us/td/docs/ios/12_2/security/command/reference/srfike.html#wp1017897
upvoted 1 times
...
gondohwe
11 months, 2 weeks ago
the command "crypto isakamp key xxxx address x.x.x.x " is used to specify the shared secret and the peer is expected at the other end of the connecton........so D is the right choice
upvoted 2 times
...
Anonymous983475
1 year, 3 months ago
I think none of the answers are correct or the question itself is wrong. If you do not add a subnet mask at the end of the command the default class is assumed. The default class for 1.2.3.4 is class A, which has mask 255.0.0.0 or 8 bits. This means that all addresses from the 1.0.0.0/8 network will be accepted for authentication with that key.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago