MENU
The network administrator at Spears Technology, Inc has configured the default gateway Cisco router's access-list as below:
You are hired to conduct security testing on their network.
You successfully brute-force the SNMP community string using a SNMP crack tool.
The access-list configured at the router prevents you from establishing a successful connection.
You want to retrieve the Cisco configuration from the router. How would you proceed?
Suggested Answer: B, D
Get Premium 312-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
17 comments · newest first
LE
Leota
10 months ago
Definitely option D, spoofing the IP could work!
JE
Jerilyn
10 months ago
Access-lists are tough, but there’s always a way around them!
KA
Karima
10 months ago
Running a sniffer is a solid move, but it might not get you the config.
AS
Ashton
11 months ago
I thought GRE tunneling was outdated? Not sure about that one.
ST
Stefania
11 months ago
You can’t just use the default TFTP password anymore, it’s too risky.
FI
Fidelia
11 months ago
Spoofing the source IP with SNMP sounds risky. I think I read that it could work, but it seems like it might raise alarms on the network.
SE
Selene
11 months ago
GRE tunneling sounds familiar, but I’m not sure if it’s the right approach here. Can it really mask my IP effectively against the router's access-list?
HE
Herman
11 months ago
I feel like I’ve seen a question similar to this before, but I can’t recall if capturing traffic would actually work. Wouldn’t the access-list block that too?
WI
Wilford
11 months ago
I remember something about using TFTP, but I thought it required specific permissions. Is the default password still a viable option?
CA
Casey
12 months ago
Hmm, capturing the traffic with a network sniffer could work, but it might be a bit more complicated than some of the other options. I'll need to make sure I have the right tools and know-how to pull that off effectively.
TI
Tiera
12 months ago
I like the idea of using a spoofed IP address to bypass the access-list. That could be a clever way to get around the restrictions. I'll need to make sure I have the right IP range, though.
CO
Cornell
12 months ago
I'm a bit confused by the GRE tunneling option. I'm not sure how that would work in this scenario, and it seems a bit risky. I'll need to do some more research on that.
TE
Teresita
1 year ago
Okay, let's see here. I'm pretty confident that the TFTP default password option is the way to go. That seems like the most straightforward solution.
EM
Emeline
1 year ago
Hmm, this is a tricky one. I'll need to carefully consider the options and think through the potential risks and consequences of each approach.
CA
Carmen
1 year ago
Hmm, I'm a bit unsure about this one. I know AAA stands for authentication, authorization, and accounting, but I'm not sure which protocol is specifically used for authorization. I'll have to think this through carefully.
AL
Aleshia
1 year ago
I'm pretty confident I know the answer to this one. Flow Designer definitely supports calling a subflow from a flow, so that can't be the correct answer.
EV
Eveline
1 year ago
Social engineering is all about manipulating people to gain access to confidential information, right? I'm pretty sure option B is the correct answer.