Quiz
CCNA Security Chapter 6
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (24)
1What is the only type of port that an isolated port can forward traffic to on a private VLAN?
- Aa community port
- Ba promiscuous port
- Canother isolated port
- Dany access port in the same PVLAN
2Which three functions are provided under Cisco NAC framework solution? (Choose three.)
- AVPN connection
- BAAA services
- Cintrusion prevention
- Dscanning for policy compliance
- Esecure connection to servers
- Fremediation for noncompliant devices
3How can a user connect to the Cisco Cloud Web Security service directly?
- Athrough the connector that is integrated into any Layer 2 Cisco switch
- Bby using a proxy autoconfiguration file in the end device
- Cby accessing a Cisco CWS server before visiting the destination web site
- Dby establishing a VPN connection with the Cisco CWS
4In what situation would a network administrator most likely implement root guard?
- Aon all switch ports (used or unused)
- Bon all switch ports that connect to a Layer 3 device
- Con all switch ports that connect to host devices
- Don all switch ports that connect to another switch
- Eon all switch ports that connect to another switch that is not the root bridge
5Which feature is part of the Antimalware Protection security solution?
- Afile retrospection
- Buser authentication and authorization
- Cdata loss prevention
- Dspam blocking
6Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?
- Aport security
- Broot guard
- Cstorm control
- DBPDU filter
7What two mechanisms are used by Dynamic ARP inspection to validate ARP packets for IP addresses that are dynamically assigned or IP addresses that are static? (Choose two.)
- AMAC-address-to-IP-address bindings
- BSource Guard
- CARP ACLs
- DRARP
- EIP ACLs
8Which mitigation technique would prevent rogue servers from providing false IP configuration parameters to clients?
- Adisabling CDP on edge ports
- Bimplementing port security
- Cturning on DHCP snooping
- Dimplementing port-security on edge ports
9What security countermeasure is effective for preventing CAM table overflow attacks?
- ADHCP snooping
- BDynamic ARP Inspection
- Cport security
- DIP source guard
10What is the role of the Cisco NAC Guest Server within the Cisco Borderless Network architecture?
- AIt provides post-connection monitoring of all endpoint devices.
- BIt provides the ability for creation and reporting of guest accounts.
- CIt defines role-based user access and endpoint security policies.
- DIt performs deep inspection of device security profiles.
11Which spanning-tree enhancement prevents the spanning-tree topology from changing by blocking a port that receives a superior BPDU?
- Aroot guard
- BPortFast
- CBDPU filter
- DBPDU guard
12What is the role of the Cisco NAC Server within the Cisco Secure Borderless Network Architecture?
- Adefining role-based user access and endpoint security policies
- Bassessing and enforcing security policy compliance in the NAC environment
- Cproviding the ability for company employees to create guest accounts
- DProviding post-connection monitoring of all endpoint devices
13What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?
- AIP address spoofing
- BDHCP starvation
- CDHCP spoofing
- DCAM table attack
14What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?
- Aport security
- Broot guard
- CBPDU Guard
- DDHCP snooping
15What is the role of the Cisco NAC Manager in implementing a secure networking infrastructure?
- Ato assess and enforce security policy compliance in the NAC environment
- Bto provide post-connection monitoring of all endpoint devices
- Cto define role-based user access and endpoint security policies
- Dto perform deep inspection of device security profiles
16What component of Cisco NAC is responsible for performing deep inspection of device security profiles?
- ACisco NAC Server
- BCisco NAC Profiler
- CCisco NAC Agent
- DCisco NAC Manager
17What protocol should be disabled to help mitigate VLAN hopping attacks?
- AARP
- BDTP
- CSTP
- DCDP
18What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?
- Apreventing rogue switches from being added to the network
- Bpreventing buffer overflow attacks
- Cenforcing the placement of root bridges
- Dprotecting against Layer 2 loops
19Which STP stability mechanism is used to prevent a rogue switch from becoming the root switch?
- ASource Guard
- BBPDU guard
- Croot guard
- Dloop guard
20What are three techniques for mitigating VLAN hopping attacks? (Choose three.)
- AEnable Source Guard.
- BUse private VLANs.
- CEnable trunking manually.
- DDisable DTP.
- EEnable BPDU guard.
- FSet the native VLAN to an unused VLAN.
21Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?
- AThe Fa0/24 interface of S1 is configured with the same MAC address as the Fa0/2 interface.
- BThe connection between S1 and PC1 is via a crossover cable.
- CS1 has been configured with a switchport port-security aging command.
- DThe MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address.
22Which two functions are provided by Network Admission Control? (Choose two.)
- Aenforcing network security policy for hosts that connect to the network
- Bprotecting a switch from MAC address table overflow attacks
- Cstopping excessive broadcasts from disrupting network traffic
- Densuring that only authenticated hosts can access the network
- Elimiting the number of MAC addresses that can be learned on a single switch port
23Two devices that are connected to the same switch need to be totally isolated from one another. Which Cisco switch security feature will provide this isolation?
- APVLAN Edge
- BSPAN
- CBPDU guard
- DDTP
24What is the behavior of a switch as a result of a successful CAM table attack?
- AThe switch interfaces will transition to the error-disabled state.
- BThe switch will shut down
- CThe switch will forward all received frames to all other ports
- DThe switch will drop all received frames.
Information
- Description
- Chapter 6 Quiz on CCNA Security Chapter 6, created by A H on 08/05/2018.
- Author
- A H
- Language
- English
- Views
- 125
- Tags
- Rating
- No ratings yet Rate this quiz