prepking 920-234 exam questions

8/6/2019 Prepking 920-234 Exam Questions

1/11

www.prepking.com

Exam : Nortel 920-234

Title : Nortel VPN Router Ris. 7.0Configuration & Management(NCSS)

Version : R6.1


2/11

www.prepking.com

Prepking - King of Computer Certification

Important Information, Please Read Carefully

Other Prepking productsA) Offline Testing engineUse the offline Testing engine product to practice the questions in an exam environment.B) Study Guide (not available for all exams)Build a foundation of knowledge which will be useful also after passing the exam.

Latest VersionWe are constantly reviewing our products. New material is added and old material is

updated. Free updates are available for 90 days after the purchase. You should check yourmember zone at Prepking and update 3-4 days before the scheduled exam date.Here is the procedure to get the latest version:1.Go towww.Prepking.com2.Click on Member zone/Log in (right side)3. Then click My Account4.The latest versions of all purchased products are downloadable from here. Just click thelinks.For most updates,it is enough just to print the new questions at the end of the new version, not the wholedocument.

FeedbackIf you spot a possible improvement then please let us know. We always interested inimproving product quality.Feedback should be send to [email protected]. You should include the following:Exam number, version, page number, question number, and your login ID.Our experts will answer your mail promptly.

CopyrightEach PDF file contains a unique serial number associated with your particular name andcontact information for security purposes. So if we find out that a particular PDF file is

being distributed by you, Prepking reserves the right to take legal action against youaccording to the International Copyright Laws.

ExplanationsThis product does not include explanations at the moment. If you are interested inproviding explanations for this exam, please contact [email protected]. .


3/11

www.prepking.com

1. A customer has a VPN Router 1750 with VPN tunneling capabilities.

They want to enable subscribers to have user tunnel connections to the router.

Which parameter must be configured to implement user tunnels on a VPN Router?

A. a user group

B. LDAP group settings

C. password group settings

D. an IP address assignment

E. tunneling protocols settings

Answer: D

2. An engineer wants to configure a firewall policy on the VPN router, and wants to change the system-wide

rules that are applied and processed first by the firewall.

Which Stateful Firewall rules need to be modified?

A. Implied Rules

B. Default Rules

C. Override Rules

D. Interface-specific Rules.

Answer: C

3. Which three VPN Router models support the "SSL VPN Module 1000" hardware option card? (Choose

three.)

A. VPN Router 1050

B. VPN Router 1100C. VPN Router 1750

D. VPN Router 2750

E. VPN Router 5000

Answer: CDE

4. A customer would like to use a VPN Router 1750 for SSL VPN and offload encryption onto multiple

hardware accelerator cards.

Which statement is true?

A. The 1750 chassis does not support the SSL VPN module or the hardware accelerator card.B. SSL VPN module and hardware accelerator cards can not be used in the same 1750 chassis.

C. The 1750 chassis does support the SSL VPN module but only a single hardware accelerator card.

D. The 1750 chassis does not support the SSL VPN module but multiple hardware accelerator cards could

be installed.

Answer: C

5. A customer has just purchased a VPN Router 1750. They want to know how much RAM it has


4/11

www.prepking.com

"out-of-the-box" and if it can be upgraded.


A. The VPN Router 1750 chassis comes with 256MB installed and is not upgradeable.

B. The VPN Router 1750 chassis comes with 128MB of RAM installed and is upgradeable to 512MB.

C. The VPN Router 1750 chassis comes with 256MB of RAM installed and is upgradeable to 512MB.

D. The VPN Router 1750 chassis comes with 128MB of RAM installed and is upgradeable to 256MB.

Answer: D

6. A customer has just purchased a VPN Router. They want to know which License Keys are available and

what functions each individual key enables.


A. The Advanced Routing key enables RIP, OSPF and VRRP functions.

B. The Premium Routing key activates OSPF, VRRP, DLSw and BGP routing functions.

C. The BGP Routing key enables Border Gateway Protocol routing and Data Link Switching capabilities.

D. The VPN Router Stateful Firewall key enables stateful firewall capabilities but disables the standard VPN

Router firewall functions.

Answer: B

7. On a VPN Router Rls. 7.0 system, on which two interface types can the routing protocols RIP, OSPF and

VRRP be enabled? (Choose two.)

A. Single HSSI

B. Single or Dual V.35

C. 10/100 Ethernet port, System BoardD. 10/100 Ethernet port, Expansion Module

Answer: CD

8. Which three QoS features are available on the VPN Router? (Choose three.)

A. CLIP

B. DiffServ

C. Demand Services

D. Forwarding Priority

E. Resource Reservation ProtocolAnswer: BDE

9. Which three statements are true regarding IPSec Mobility? (Choose three.)

A. VPN tunnel connections survive lost packets.

B. IPSec Mobility is activated with the Advance Routing license key.

C. For IPSec Mobility to work, any VPN Client version can be running.

D. NAT Traversal and IPSec Fail-over will not interoperate with IPSec Mobility.


5/11

www.prepking.com

E. IPSec Mobility is provisioned at the VPN Router, and the settings are pushed down from the server.

Answer: ABE

10. When configuring the VPN Router 1750 system, how are the management IP address and subnet mask

initially configured?

A. The management IP address and subnet mask are configured by using the serial interface.

B. The management IP address and subnet mask will be automatically provided by a DHCP server.

C. When powered up, the VPN Router will initially be configured with a default management IP address and

subnet mask.

D. Having the management IP address and subnet mask configured is not initially required and can be

configured from a web browser at anytime.

Answer: A

11. A customer has a new VPN Router 1100 at the company site. They want to set up Out of Band

Management to the VPN Router system.

What step should the support engineer take to accomplish this task?

A. Connect the RJ-45 connector to the VPN Router system and the DB9 connector to the workstation.

B. Connect the RJ-11 connector to the workstation and the DB9 connector to the VPN Router system.

C. Connect the RJ-45 connector to the workstation and the DB9 connector to the VPN Router system.

D. Connect the RJ-45 connector to the workstation and the DB25 connector to the VPN Router system.

Answer: A

12. A support engineer wants to enable telnet and FTP access on a new VPN Router Rls. 7.0 system.

What is the minimum requirement to achieve this objective?A. Configure the VPN Router with a Private Default route.

B. Configure the VPN Router with a Management IP Address.

C. Configure the VPN Router with a Public IP Interface address.

D. Configure the VPN Router with a Private IP Interface address.

Answer: B

13. What steps are required for a support engineer to configure a WAN interface on a new VPN Router Rls.

7.0 system?

A. Set the Layer 2 WAN protocol for the interface to either Frame Relay or PPP.B. Turn the firewall on and set the Layer 2 WAN protocol to Frame Relay or PPP.

C. Enable the VPN Router interface filter and set the Layer 2 WAN Protocol to Frame Relay or PPP.

D. Turn the firewall on, enable the VPN Router interface filter, and set the Layer 2 WAN protocol to Frame

Relay or PPP.

Answer: D

14. Which tunneling protocol offers a strong level of encryption and integrity protection, as well as using


6/11

www.prepking.com

digital certificates, password-based keys, and tokens for authentication?

A. L2F

B. L2TP

C. PPTP

D. IPSec

Answer: D

15. Which protocol does IPSec use to encapsulate data?

A. AH

B. ESP

C. GRE

D. L2TP

Answer: B

16. Your customer has been advised to use tunneling.

Which two features use PPP as the carrier protocol? (Choose two.)

A. SSL

B. L2TP

C. IPSec

D. PPTP

Answer: BD

17. Your customer is very concerned about security and wants to encrypt the company data.

Which feature encrypts data at the session layer of the OSI model?A. SSL

B. L2TP

C. PPTP

D. IPSEC

Answer: A

18. Which three are tunnel controls used to provision a VPN tunnel? (Choose three.)

A. the non-Tunnel traffic rating

B. the operational parameters for DLSw and BGP routing protocolsC. the local network that is allowed to access the tunnel, and the remote networks that can be accessed

across the tunnel

D. the identification and password or certificate that is used to identify the user or the devices (or both) at

either end of the tunnel

E. the two IP addresses that form the endpoints of the tunnel and the protocol, authentication method, and

encryption and hashing algorithms used to operate the tunnel


7/11

www.prepking.com

Answer: CDE

19. You are tasked with configuring IPSec user tunnel connections for remote subscribers. The subscribers

will belong to a new group called the BASE/SALES group. The IPSec user tunnel configuration will be

configured on an existing VPN Router 1050 system.

Which statement is true regarding this configuration?

A. The Base group cannot pass its attributes to other groups.

B. The new group will inherit permissions from the BASE group.

C. The new group will not inherit permissions from the BASE group.

D. The Base/Sales group will automatically have its own default system parameters.

Answer: B

20. A Nortel VPN Client using IPSec Mobility is behind a VPN Router with NAT Traversal enabled and UDP

encapsulation for the ESP port is used.

Which setting would you select to ensure that roaming is seamless?

A. the Not Allowed option for NAT Traversal

B. the Auto-Detect NAT option for NAT Traversal

C. the Always UDP Encap option for NAT Traversal

D. the Auto-Detect IPSec Capable NAT option for NAT Traversal

Answer: C

21. An engineer would like to implement a secured clientless access solution for the company's remote and

mobile users that will give them access to protected intranet and extranet resources.

Which user tunnel method would you recommend?A. SSL VPN

B. L2TP over IPSec

C. IPSec using TunnelGuard

D. IPSec Mobility and Persistent Mode

Answer: A

22. When using a RADIUS server for authentication of remote VPN users, which tunneling method requires

a group ID and a group password?

A. L2FB. L2TP

C. IPSec

D. PPTP

Answer: C

23. Click the Exhibit button.


8/11

www.prepking.com

Based on the VPN Router Rls. 7.0 network in the exhibit, what would you configure as the locally

accessible network(s), when you are configuring the Cleveland switch?

A. 10.17.20.0 and 10.17.21.0

B. 132.19.2.0 and 132.168.2.0

C. 10.17.20.85 and 192.168.21.66

D. 192.158.20.0 and 192.158.21.0

Answer: D

24. On a VPN Router Rls. 7.0 system, you are creating several VPN connections from various remote sales

offices into the enterprise headquarters. The customer wants all of the remote branch offices to have the

same attributes, such as hours of access and encryption method.

What would be the most efficient method to accomplish this?

A. Assign all the branch offices the same name.

B. Associate all of the branch offices with different groups.

C. Associate all of the branch offices with the same group.

D. Associate each branch office with a different group, inheriting attributes from a common parent.

Answer: C

25. Click the Exhibit button.


9/11

www.prepking.com

Based on the VPN Router Rls. 7.0 network in the exhibit, you are tasked to configure OSPF.

How many OSPF areas are required to make the branch office configuration work?

A. 1

B. 2

C. 3

D. 4

Answer: A

26. Which three statements about Asymmetric Branch Office Tunnels are true? (Choose three.)

A. ABOTs cannot run dynamic routing protocols.

B. The dynamic end of the tunnel must initiate the tunnel.

C. One end of the tunnel must be dynamically addressed.

D. The statically addressed end must be set as the responder.

E. An ABOT is defined as a branch office tunnel that has a static IP address at one end and a dynamic IP

address at the other end.

Answer: BDE

27. A customer wants OSPF routing configured on the company VPN Router system. The OSPF routing

protocol will be used to manage a large university network made up of several smaller campus networks

each with its own OSPF Area.

When setting up the OSPF areas, which requirement must you follow to configure the option on the VPN

Router system?

A. The Area IDs must be unique.

B. The Area Integers must be the same.

C. The interfaces must be point-to-point, not broadcast.


10/11


11/11

100% Pass Guaranteed or Full Refund Word to Word Real Exam Questions from Real Test

Buy full version of exam from this link below http://www.prepking.com/920-234.htm

prepking 920-234 exam questions

Documents