GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

CCNP 300-115 TOPIC SEGURIDAD

Alexander Gomez 31 questions

Take the quiz

Questions in this quiz (31)

  1. 1A Cisco Catalyst switch that is prone to reboots continues to rebuild the DHCP snooping
    database. What is the solution to avoid the snooping database from being rebuilt after every
    device reboot?
    1. AA DHCP snooping database agent should be configured.
    2. BEnable DHCP snooping for all VLANs that are associated with the switch.
    3. CDisable Option 82 for DHCP data insertion.
    4. DUse IP Source Guard to protect the DHCP binding table entries from being lost upon rebooting.
    5. EApply ip dhcp snooping trust on all interfaces with dynamic addresses.
  2. 2Which portion of AAA looks at what a user has access to?
    1. Aauthorization
    2. Bauthentication
    3. Caccounting
    4. Dauditing
  3. 3Which command creates a login authentication method named “login” that will primarily use
    RADIUS and fail over to the local user database?
    1. A(config)# aaa authentication login default radius local
    2. B(config)# aaa authentication login login radius local
    3. C(config)# aaa authentication login default local radius
    4. D(config)# aaa authentication login radius local
  4. 4A server with a statically assigned IP address is attached to a switch that is provisioned for DHCP
    snooping. For more protection against malicious attacks, the network team is considering enabling
    dynamic ARP inspection alongside DHCP snooping. Which solution ensures that the server
    maintains network reachability in the future?
    1. ADisable DHCP snooping information option.
    2. BConfigure a static DHCP snooping binding entry on the switch.
    3. CTrust the interface that is connected to the server with the ip dhcp snooping trust command.
    4. DVerify the source MAC address of all untrusted interfaces with ip dhcp snooping verify macaddress
      command.
  5. 5A network engineer wants to ensure Layer 2 isolation of customer traffic using a private VLAN.
    Which configuration must be made before the private VLAN is configured?
    1. ADisable VTP and manually assign VLANs.
    2. BEnsure all switches are configured as VTP server mode.
    3. CConfigure VTP Transparent Mode.
    4. DEnable VTP version 3.
  6. 6DHCP snooping and IP Source Guard have been configured on a switch that connects to several
    client workstations. The IP address of one of the workstations does not match any entries found in
    the DHCP binding database. Which statement describes the outcome of this scenario?
    1. APackets from the workstation will be rate limited according to the default values set on the switch.
    2. BThe interface that is connected to the workstation in question will be put into the errdisabled state.
    3. CTraffic will pass accordingly after the new IP address is populated into the binding database.
    4. DThe packets originating from the workstation are assumed to be spoofed and will be discarded.
  7. 7A DHCP configured router is connected directly to a switch that has been provisioned with DHCP
    snooping. IP Source Guard with the ip verify source port-security command is configured under
    the interfaces that connect to all DHCP clients on the switch. However, clients are not receiving an
    IP address via the DHCP server. Which option is the cause of this issue?
    1. AThe DHCP server does not support information option 82.
    2. BThe DHCP client interfaces have storm control configured.
    3. CStatic DHCP bindings are not configured on the switch.
    4. DDHCP snooping must be enabled on all VLANs, even if they are not utilized for dynamic address
      allocation.
  8. 8A switch is added into the production network to increase port capacity. A network engineer is
    configuring the switch for DHCP snooping and IP Source Guard, but is unable to configure ip
    verify source under several of the interfaces. Which option is the cause of the problem?
    1. AThe local DHCP server is disabled prior to enabling IP Source Guard.
    2. BThe interfaces are configured as Layer 3 using the no switchport command.
    3. CNo VLANs exist on the switch and/or the switch is configured in VTP transparent mode
    4. DThe switch is configured for sdm prefer routing as the switched database management template.
    5. EThe configured SVIs on the switch have been removed for the associated interfaces.
  9. 9The command storm-control broadcast level 75 65 is configured under the switch port
    connected to the corporate mail server. In which three ways does this command impact the traffic?
    (Choose three.)
    1. ASNMP traps are sent by default when broadcast traffic reaches 65% of the lower-level threshold.
    2. BThe switchport is disabled when unicast traffic reaches 75% of the total interface bandwidth.
    3. CThe switch resumes forwarding broadcasts when they are below 65% of bandwidth.
    4. DOnly broadcast traffic is limited by this particular storm control configuration.
    5. EMulticast traffic is dropped at 65% and broadcast traffic is dropped at 75% of the total interface
      bandwidth
    6. FThe switch drops broadcasts when they reach 75% of bandwidth.
  10. 10After port security is deployed throughout an enterprise campus, the network team has been
    overwhelmed with port reset requests. They decide to configure the network to automate the
    process of re-enabling user ports. Which command accomplishes this task?
    1. Aswitch(config)# errdisable recovery interval 180
    2. Bswitch(config)# errdisable recovery cause psecure-violation
    3. Cswitch(config)# switchport port-security protect
    4. Dswitch(config)# switchport port-security aging type inactivity
    5. Eswitch(config)# errdisable recovery cause security-violation

Information

Description
topic security
Language
Español
Views
151
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?