GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

CCNA Security Chapter 6 Exam

d94829 24 questions

Take the quiz

Questions in this quiz (24)

  1. 1Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?Image for question 1
    1. AThe connection between S1 and PC1 is via a crossover cable
    2. BThe Fa0/24 interface of S1 is configured with the same MAC address as the Fa0/2 interface
    3. CS1 has been configured with a switchport port-security aging command
    4. DThe MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address
  2. 2Two devices that are connected to the same switch need to be totally isolated from one another. Which Cisco switch security feature will provide this isolation?
    1. APVLAN Edge
    2. BDTP
    3. CSPAN
    4. DBPDU guard
  3. 3Which two functions are provided by Network Admission Control?
    1. Aprotecting a switch from MAC address table overflow attacks
    2. Benforcing network security policy for hosts that connect to the network
    3. Censuring that only authenticated hosts can access the network
    4. Dstopping excessive broadcasts from disrupting network traffic
    5. Elimiting the number of MAC addresses that can be learned on a single switch port
  4. 4Which spanning-tree enhancement prevents the spanning-tree topology from changing by blocking a port that receives a superior BPDU?
    1. ABDPU filter
    2. BPortFast
    3. CBPDU guard
    4. Droot guard
  5. 5Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?
    1. Aroot guard
    2. Bport security
    3. Cstorm control
    4. DBPDU filter
  6. 6In what situation would a network administrator most likely implement root guard?
    1. Aon all switch ports (used or unused)
    2. Bon all switch ports that connect to a Layer 3 device
    3. Con all switch ports that connect to host devices
    4. Don all switch ports that connect to another switch
    5. Eon all switch ports that connect to another switch that is not the root bridge
  7. 7What component of Cisco NAC is responsible for performing deep inspection of device security profiles?
    1. ACisco NAC Profiler
    2. BCisco NAC Agent
    3. CCisco NAC Manager
    4. DCisco NAC Server
  8. 8What is the role of the Cisco NAC Manager in implementing a secure networking infrastructure?
    1. Ato define role-based user access and endpoint security policies
    2. Bto assess and enforce security policy compliance in the NAC environment
    3. Cto perform deep inspection of device security profiles
    4. Dto provide post-connection monitoring of all endpoint devices
  9. 9What is the role of the Cisco NAC Server within the Cisco Secure Borderless Network Architecture?
    1. Aproviding the ability for company employees to create guest accounts
    2. Bproviding post-connection monitoring of all endpoint devices
    3. Cdefining role-based user access and endpoint security policies
    4. Dassessing and enforcing security policy compliance in the NAC environment
  10. 10What is the role of the Cisco NAC Guest Server within the Cisco Borderless Network architecture?
    1. AIt defines role-based user access and endpoint security policies.
    2. BIt provides the ability for creation and reporting of guest accounts
    3. CIt provides post-connection monitoring of all endpoint devices
    4. DIt performs deep inspection of device security profiles

Information

Description
CCNA Security Chapter 6 Exam
Language
English
Views
649
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?