Exam Title

: Nortel 920-234 : Nortel VPN Router Ris. 7.0 Configuration & Management (NCSS)

Version : R6.1

www.prepking.com

Prepking - King of Computer Certification Important Information, Please Read Carefully

Other Prepking products A) Offline Testing engine Use the offline Testing engine product to practice the questions in an exam environment. B) Study Guide (not available for all exams) Build a foundation of knowledge which will be useful also after passing the exam. Latest Version We are constantly reviewing our products. New material is added and old material is updated. Free updates are available for 90 days after the purchase. You should check your member zone at Prepking and update 3-4 days before the scheduled exam date. Here is the procedure to get the latest version: 1.Go towww.Prepking.com 2.Click on Member zone/Log in (right side) 3. Then click My Account 4.The latest versions of all purchased products are downloadable from here. Just click the links. For most updates,it is enough just to print the new questions at the end of the new version, not the whole document. Feedback If you spot a possible improvement then please let us know. We always interested in improving product quality. Feedback should be send to feedback@Prepking.com. You should include the following: Exam number, version, page number, question number, and your login ID. Our experts will answer your mail promptly. Copyright Each PDF file contains a unique serial number associated with your particular name and contact information for security purposes. So if we find out that a particular PDF file is being distributed by you, Prepking reserves the right to take legal action against you according to the International Copyright Laws. Explanations This product does not include explanations at the moment. If you are interested in providing explanations for this exam, please contact feedback@Prepking.com..

www.prepking.com

 1. A customer has a VPN Router 1750 with VPN tunneling capabilities. They want to enable subscribers to have user tunnel connections to the router. Which parameter must be configured to implement user tunnels on a VPN Router? A. a user group B. LDAP group settings C. password group settings D. an IP address assignment E. tunneling protocols settings Answer: D 2. An engineer wants to configure a firewall policy on the VPN router, and wants to change the system-wide rules that are applied and processed first by the firewall. Which Stateful Firewall rules need to be modified? A. Implied Rules B. Default Rules C. Override Rules D. Interface-specific Rules. Answer: C 3. Which three VPN Router models support the "SSL VPN Module 1000" hardware option card? (Choose three.) A. VPN Router 1050 B. VPN Router 1100 C. VPN Router 1750 D. VPN Router 2750 E. VPN Router 5000 Answer: CDE 4. A customer would like to use a VPN Router 1750 for SSL VPN and offload encryption onto multiple hardware accelerator cards. Which statement is true? A. The 1750 chassis does not support the SSL VPN module or the hardware accelerator card. B. SSL VPN module and hardware accelerator cards can not be used in the same 1750 chassis. C. The 1750 chassis does support the SSL VPN module but only a single hardware accelerator card. D. The 1750 chassis does not support the SSL VPN module but multiple hardware accelerator cards could be installed. Answer: C 5. A customer has just purchased a VPN Router 1750. They want to know how much RAM it has
www.prepking.com

 "out-of-the-box" and if it can be upgraded. Which statement is true? A. The VPN Router 1750 chassis comes with 256MB installed and is not upgradeable. B. The VPN Router 1750 chassis comes with 128MB of RAM installed and is upgradeable to 512MB. C. The VPN Router 1750 chassis comes with 256MB of RAM installed and is upgradeable to 512MB. D. The VPN Router 1750 chassis comes with 128MB of RAM installed and is upgradeable to 256MB. Answer: D 6. A customer has just purchased a VPN Router. They want to know which License Keys are available and what functions each individual key enables. Which statement is true? A. The Advanced Routing key enables RIP, OSPF and VRRP functions. B. The Premium Routing key activates OSPF, VRRP, DLSw and BGP routing functions. C. The BGP Routing key enables Border Gateway Protocol routing and Data Link Switching capabilities. D. The VPN Router Stateful Firewall key enables stateful firewall capabilities but disables the standard VPN Router firewall functions. Answer: B 7. On a VPN Router Rls. 7.0 system, on which two interface types can the routing protocols RIP, OSPF and VRRP be enabled? (Choose two.) A. Single HSSI B. Single or Dual V.35 C. 10/100 Ethernet port, System Board D. 10/100 Ethernet port, Expansion Module Answer: CD 8. Which three QoS features are available on the VPN Router? (Choose three.) A. CLIP B. DiffServ C. Demand Services D. Forwarding Priority E. Resource Reservation Protocol Answer: BDE 9. Which three statements are true regarding IPSec Mobility? (Choose three.) A. VPN tunnel connections survive lost packets. B. IPSec Mobility is activated with the Advance Routing license key. C. For IPSec Mobility to work, any VPN Client version can be running. D. NAT Traversal and IPSec Fail-over will not interoperate with IPSec Mobility.
www.prepking.com

 E. IPSec Mobility is provisioned at the VPN Router, and the settings are pushed down from the server. Answer: ABE 10. When configuring the VPN Router 1750 system, how are the management IP address and subnet mask initially configured? A. The management IP address and subnet mask are configured by using the serial interface. B. The management IP address and subnet mask will be automatically provided by a DHCP server. C. When powered up, the VPN Router will initially be configured with a default management IP address and subnet mask. D. Having the management IP address and subnet mask configured is not initially required and can be configured from a web browser at anytime. Answer: A 11. A customer has a new VPN Router 1100 at the company site. They want to set up Out of Band Management to the VPN Router system. What step should the support engineer take to accomplish this task? A. Connect the RJ-45 connector to the VPN Router system and the DB9 connector to the workstation. B. Connect the RJ-11 connector to the workstation and the DB9 connector to the VPN Router system. C. Connect the RJ-45 connector to the workstation and the DB9 connector to the VPN Router system. D. Connect the RJ-45 connector to the workstation and the DB25 connector to the VPN Router system. Answer: A 12. A support engineer wants to enable telnet and FTP access on a new VPN Router Rls. 7.0 system. What is the minimum requirement to achieve this objective? A. Configure the VPN Router with a Private Default route. B. Configure the VPN Router with a Management IP Address. C. Configure the VPN Router with a Public IP Interface address. D. Configure the VPN Router with a Private IP Interface address. Answer: B 13. What steps are required for a support engineer to configure a WAN interface on a new VPN Router Rls. 7.0 system? A. Set the Layer 2 WAN protocol for the interface to either Frame Relay or PPP. B. Turn the firewall on and set the Layer 2 WAN protocol to Frame Relay or PPP. C. Enable the VPN Router interface filter and set the Layer 2 WAN Protocol to Frame Relay or PPP. D. Turn the firewall on, enable the VPN Router interface filter, and set the Layer 2 WAN protocol to Frame Relay or PPP. Answer: D 14. Which tunneling protocol offers a strong level of encryption and integrity protection, as well as using
www.prepking.com

 digital certificates, password-based keys, and tokens for authentication? A. L2F B. L2TP C. PPTP D. IPSec Answer: D 15. Which protocol does IPSec use to encapsulate data? A. AH B. ESP C. GRE D. L2TP Answer: B 16. Your customer has been advised to use tunneling. Which two features use PPP as the carrier protocol? (Choose two.) A. SSL B. L2TP C. IPSec D. PPTP Answer: BD 17. Your customer is very concerned about security and wants to encrypt the company data. Which feature encrypts data at the session layer of the OSI model? A. SSL B. L2TP C. PPTP D. IPSEC Answer: A 18. Which three are tunnel controls used to provision a VPN tunnel? (Choose three.) A. the non-Tunnel traffic rating B. the operational parameters for DLSw and BGP routing protocols C. the local network that is allowed to access the tunnel, and the remote networks that can be accessed across the tunnel D. the identification and password or certificate that is used to identify the user or the devices (or both) at either end of the tunnel E. the two IP addresses that form the endpoints of the tunnel and the protocol, authentication method, and encryption and hashing algorithms used to operate the tunnel
www.prepking.com

 Answer: CDE 19. You are tasked with configuring IPSec user tunnel connections for remote subscribers. The subscribers will belong to a new group called the BASE/SALES group. The IPSec user tunnel configuration will be configured on an existing VPN Router 1050 system. Which statement is true regarding this configuration? A. The Base group cannot pass its attributes to other groups. B. The new group will inherit permissions from the BASE group. C. The new group will not inherit permissions from the BASE group. D. The Base/Sales group will automatically have its own default system parameters. Answer: B 20. A Nortel VPN Client using IPSec Mobility is behind a VPN Router with NAT Traversal enabled and UDP encapsulation for the ESP port is used. Which setting would you select to ensure that roaming is seamless? A. the Not Allowed option for NAT Traversal B. the Auto-Detect NAT option for NAT Traversal C. the Always UDP Encap option for NAT Traversal D. the Auto-Detect IPSec Capable NAT option for NAT Traversal Answer: C 21. An engineer would like to implement a secured clientless access solution for the company's remote and mobile users that will give them access to protected intranet and extranet resources. Which user tunnel method would you recommend? A. SSL VPN B. L2TP over IPSec C. IPSec using TunnelGuard D. IPSec Mobility and Persistent Mode Answer: A 22. When using a RADIUS server for authentication of remote VPN users, which tunneling method requires a group ID and a group password? A. L2F B. L2TP C. IPSec D. PPTP Answer: C 23. Click the Exhibit button.

www.prepking.com

Based on the VPN Router Rls. 7.0 network in the exhibit, what would you configure as the locally accessible network(s), when you are configuring the Cleveland switch? A. 10.17.20.0 and 10.17.21.0 B. 132.19.2.0 and 132.168.2.0 C. 10.17.20.85 and 192.168.21.66 D. 192.158.20.0 and 192.158.21.0 Answer: D 24. On a VPN Router Rls. 7.0 system, you are creating several VPN connections from various remote sales offices into the enterprise headquarters. The customer wants all of the remote branch offices to have the same attributes, such as hours of access and encryption method. What would be the most efficient method to accomplish this? A. Assign all the branch offices the same name. B. Associate all of the branch offices with different groups. C. Associate all of the branch offices with the same group. D. Associate each branch office with a different group, inheriting attributes from a common parent. Answer: C 25. Click the Exhibit button.

www.prepking.com

Based on the VPN Router Rls. 7.0 network in the exhibit, you are tasked to configure OSPF. How many OSPF areas are required to make the branch office configuration work? A. 1 B. 2 C. 3 D. 4 Answer: A 26. Which three statements about Asymmetric Branch Office Tunnels are true? (Choose three.) A. ABOTs cannot run dynamic routing protocols. B. The dynamic end of the tunnel must initiate the tunnel. C. One end of the tunnel must be dynamically addressed. D. The statically addressed end must be set as the responder. E. An ABOT is defined as a branch office tunnel that has a static IP address at one end and a dynamic IP address at the other end. Answer: BDE 27. A customer wants OSPF routing configured on the company VPN Router system. The OSPF routing protocol will be used to manage a large university network made up of several smaller campus networks each with its own OSPF Area. When setting up the OSPF areas, which requirement must you follow to configure the option on the VPN Router system? A. The Area IDs must be unique. B. The Area Integers must be the same. C. The interfaces must be point-to-point, not broadcast.
www.prepking.com

 D. The interface IP addresses within the OSPF must share a common subnet mask. Answer: A 28. Which two are required to enable BGP? (Choose two.) A. Enable BGP under Routing-->BGP. B. Configure interface filter allowing TCP 179. C. Enable on public interface under Services-->Available. D. Enable on private interface under Services-->Available. Answer: AC 29. A customer is implementing a VPN Router 5000. The VPN Router must support Data Link Switching, OSPF, and BGP. What are the licensing requirements? A. Premium Routing B. Advanced Routing C. Advanced Routing and BGP D. DLSw and Premium Routing Answer: D 30. On a VPN Router configuration, you want to ensure that the Nortel VPN Client users have the highest data protection possible. What should you select in the group profile? A. ESP - Triple DES with MD5 Integrity B. ESP - 56-bit DES with SHA1 Integrity C. ESP - Triple DES with SHA1 Integrity D. ESP - 128-bit AES with SHA1 Integrity Answer: D 31. Your customer is concerned about security and is using IPsec. Which two encryption algorithms can be used with an IPsec tunnel? (Choose two.) A. AES B. DES C. RC-4 40-bit D. RC-4 128-bit Answer: AB 32. A customer has a VPN Router1750 running Release 7.0 at a remote site. The VPN Router rebooted from an unknown cause. You need to determine the cause of the reboot on the VPN Router. Which statement describes how to find information prior to the reset? A. Call Nortel Support.
www.prepking.com

100% Pass Guaranteed or Full Refund Word to Word Real Exam Questions from Real Test Buy full version of exam from this link below http://www.prepking.com/920-234.htm