Karteikarten
204-4
Karten in diesem Stapel (64)
- 1__, __, and __ are a few of the factors that help a network administrator determine the health and usage of a network.Link activity
Error rates
Link Status - 2It is commonly used to collect device information.SNMP (Simple Network Management Protocol)
- 3This must be implemented to enable port mirroring.Cisco Switch Port Analyzer
- 4These are often considered to be a safe and secure environmentLayer 2 LANs
- 5Today, with ___ and more sophisticated attacks, LANs have become more vulnerable.BYOD
- 6What are the common LAN attacks focused on gaining administrative access?CDP Reconnaissance Attack
Telnet Attacks - 7What are the common LAN attacks focused on disrupting network operation?MAC Address Table Flooding Attack
VLAN Attacks
DHCP Attacks - 8The ___ is a proprietary Layer 2 link discovery protocol.Cisco Discovery Protocol (CDP)
- 9CDP information is sent out CDP-enabled ports in ___.periodic, unencrypted broadcasts
- 10__ is a type of network attack in which an intruder gathers information about the vulnerabilities of a device or system.Reconnaissance
- 11In this type of Telnet attack, The attacker may use a list of common passwords, dictionary words, and variations of words to discover the administrative password.Brute Force Password Attack
- 12In this type of Telnet attack, The attacker continuously requests Telnet connections in an attempt to render the Telnet service unavailable and preventing an administrator from remotely accessing a switch.Telnet DOS attack
- 13The switch compares the source packet information with that held in the __.DHCP Snooping Binding Database
- 14This method stores usernames and passwords locally in the Cisco router.Local AAA Authentication
- 15This method has the AAA server contain the usernames and password for all users.Server-Based AAA Authentication
- 16The ___ protocol/standard can be used to authenticate network devices on the corporate network.802.1X
- 17The ___ standard defines a port-based access control and authentication protocol.IEEE 802.1X
- 18This is usually the 802.1X-enabled port on the device. This requires access and responds to requests from switch.Client (Supplicant)
- 19This controls physical access to the network based on the authentication status of the client.Switch (Authenticator)
- 20This performs the actual authentication of the client.Authentication server
- 21___ was developed to allow administrators to manage nodes such as servers, workstations, routers, switches, and security appliances, on an IP network.Simple Network Management Protocol
(SNMP) - 22The SNMP manager can collect information from an SNMP agent using the ___ actionget
- 23The SNMP manager can change configurations on an agent using the ___ actionset
- 24SNMP agents can forward information directly to an NMS using ___traps
- 25SNMPv1 and SNMPv2c use ___ that control access to the MIB.community strings
- 26These are plaintext passwords.Community strings
- 27___ authenticates and encrypts packets over the network to provide secure access to devices.Simple Network Management Protocol version 3 (SNMPv3)
- 28___ is a feature that allows a switch to copy and send Ethernet frames from specific ports to the destination port connected to a packet analyzer.Port mirroring
- 29This is when traffic on a switch is mirrored to another port on the switchLocal SPAN
- 30This allows source and destination ports to be in different switches.Remote SPAN
- 31Network ___ are strong candidates for QoS mechanisms.congestion points
- 32__ or __ refers to the time it takes for a packet to travel from the source to the destination.Delay
Latency - 33A __ is a specific amount of time a specific process takes, such as how long it takes to place a bit on the transmission media.fixed delay
- 34A __ take an unspecified amount of time and is affected by factors such as how much traffic is being processed.variable delay
- 35__ is the variation in the delay of received packets.Jitter
- 36The __ must buffer packets and then play them out in a steady stream.playout delay buffer
- 37For losses as small as one packet, the ___ interpolates what it thinks the audio should be and no problem is audible to the user.digital signal processor (DSP)
- 38Cisco products use the RTP port range ___ to ___ to prioritize voice traffic.16384
32767 - 39___ traffic tends to be unpredictable, inconsistent, and bursty compared to voice traffic.Video
- 40UDP ports, such as ___ are used for the Real-Time Streaming Protocol (RSTP).554
- 41___ is a congestion management tool that can buffer, prioritize, and, if required, reorder packets before being transmitted to the destination.Queuing
- 42In its simplest form, ___, involves buffering and forwarding of packets in the order of arrival.FIFO queuing
- 43___ is an automated scheduling method that provides fair bandwidth allocation to all network traffic.Weighted Fair Queueing (WFQ)
- 44All interfaces except those at E1 and below use __ [queuing] by default.FIFO
- 45Serial interfaces at E1 and below use __ by default.WFQ
- 46__ extends the standard WFQ functionality to provide support for user-defined traffic classes.Class-Based Weighted Fair Queuing (CBWFQ)
- 47While IntServ provides the highest guarantee of QoS, it is __ resource-intensive and therefore, limited in scalability.very
- 48DiffServ is __ resource-internsive and more scalable.less
- 49___ provides a way to deliver the end-to-end QoS that real-time applications require by explicitly managing network resources to provide QoS to specific user packet streams, sometimes called ___.InterServ
microflows - 50___ guarantees traffic characteristics, such as bandwidth, delay, and packet-loss rates, from end to end.Hard QoS
- 51IntServ uses a connection-oriented approach inherited from ___.telephony network design
- 52___ determines the class of traffic to which packets or frames belong.Classification
- 53___ means that we are adding a value to the packet header.Marking
- 54CoS Binary Value for Best-Effort Data000
- 55CoS Binary Value for Medium-Priority Data001
- 56CoS Binary Value for High-Priority Data010
- 57CoS Binary Value for Call Signaling011
- 58CoS Binary Value for Videoconferencing100
- 59CoS Binary Value for Voice bearer (voice traffic)101
- 60Reserved CoS Binary Values110
111 - 61Traffic should be classified and marked as close to its ___ as technically and administratively feasible.source
- 62Cisco IOS QoS includes ___ as a possible congestion avoidance solution.Weighted Random Early Detection (WRED)
- 63___ retains excess packets in a queue and then schedules the excess for later transmission over increments of time.Traffic shaping
- 64___ is commonly implemented by service providers to enforce a contracted customer information rate (CIR).Policing
Informationen
- Beschreibung
- Karteikarten am 204-4, erstellt von Thea Usita am 25/05/2018.
- Erstellt von
- Thea Usita
- Aufrufe
- 0
- Bewertung
Mehr zu LAN Security and Switch Hardening