Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) · Cisco
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. You can configure the device to authenticate the time sources to which the local clock is synchronized. When you enable NTP authentication, the device synchronizes to a time source only if the source carries one of the authentication keys specified by the ntp trusted-key command. The device drops any packets that fail the authentication check and prevents them from updating the local clock. NTP authentication is disabled by default. E. You can control access to NTP services by using access groups. Specifically, you can specify the types of requests that the device allows and the servers from which it accepts responses. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_management/7x/b_5500_System_Mgmt_Config_7x/configuring_ntp.pdf
A. encrypted authentication mechanism NTP uses MD5 hashing, NOT encryption. It is authentication, but not encrypted, so this is incorrect. C. clock offset authentication No such feature exists in NTP. D. broadcast association mode This is a synchronization mode, not a security feature. (Also considered less secure because it has no built-in authentication.)
Granted that answer "a" is a little skewed, all other answers are outright wrong. MD5 is a cryptographic hash function... close enough. The answers provided are correct... A and E.