Test
Chapter 5
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (24)
1. What is the behavior of a switch as a result of a successful CAM table attack?
- AThe switch will forward all received frames to all other ports.
- BThe switch will shut down.
- CThe switch will drop all received frames.
- DThe switch interfaces will transition to the error-disabled state.
2What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?
- ADHCP starvation
- BDHCP spoofing
- CIP address spoofing
- DCAM table attack
3Which interface on switch S1 should be configured as a DHCP snooping trusted port to help mitigate DHCP spoofing attacks?
- AG0/23
- BG0/1
- CG0/24
- DG0/22
4When using 802.1X authentication, what device controls physical access to the network, based on the authentication status of the client?
- Athe switch that the client is connected to
- Bthe authentication server
- Cthe supplicant
- Dthe router that is serving as the default gateway
5 What device is considered a supplicant during the 802.1X authentication process?
- Athe client that is requesting authentication
- Bthe switch that is controlling network access
- Cthe authentication server that is performing client authentication
- Dthe router that is serving as the default gateway
6What is a drawback of the local database method of securing device access that can be solved by using AAA with centralized servers?
- AThere is no ability to provide accountability.
- BIt is very susceptible to brute-force attacks because there is no username.
- CThe passwords can only be stored in plain text in the running configuration.
- DUser accounts must be configured locally on each device, which is an unscalable authentication solution.
7PC1 and PC2 should be able to obtain IP address assignments from the DHCP server. How many ports among switches should be assigned as trusted ports as part of the DHCP snooping configuration?
- A1
- B3
- C5
- D7
8What protocol is used to encapsulate the EAP data between the authenticator and authentication server performing 802.1X authentication?
- ARADIUS
- BTACACS
- Cssh
- DMD5
9 Which two protocols are used to provide server-based AAA authentication? (Choose two.)
- Assh
- BTACACS+
- CRADIUS
- D802.1x
- ESNMP
10Which protocol defines port-based authentication to restrict unauthorized hosts from connecting to the LAN through publicly accessible switch ports?
- A802.1x
- BRADIUS
- CTACACS
- DSSH
11What are three techniques for mitigating VLAN attacks? (Choose three.)
- ADisable DTP.
- BEnable trunking manually.
- CSet the native VLAN to an unused VLAN.
- DEnable BPDU guard.
- EEnable Source Guard.
- FUse private VLANs.
12 Which statement describes SNMP operation?
- AAn NMS periodically polls the SNMP agents that are residing on managed devices by using traps to query the devices for data.
- BA get request is used by the SNMP agent to query the device for data.
- CAn SNMP agent that resides on a managed device collects information about the device and stores that information remotely in the MIB that is located on the NMS.
- DA set request is used by the NMS to change configuration variables in the agent device.
13 A network administrator is analyzing the features supported by the multiple versions of SNMP. What are two features that are supported by SNMPv3 but not by SNMPv1 or SNMPv2c? (Choose two.)
- Abulk retrieval of MIB information
- Bmessage source validation
- Ccommunity-based security
- Dmessage encryption
- ESNMP trap mechanism
14Which protocol or service can be configured to send unsolicited messages to alert the network administrator about a network event such as an extremely high CPU utilization on a router?
- ASNMP
- Bsyslog
- CNTP
- DNetFlow
15 What is the function of the MIB element as part of a network management system?
- Ato store data about a device
- Bto collect data from SNMP agents
- Cto change configurations on SNMP agents
- Dto send and retrieve network management information
16Which SNMP version uses weak community string-based access control and supports bulk retrieval?
- ASNMPv2c
- BSNMPv1
- CSNMPv2Classic
- DSNMPv3
17What are SNMP trap messages?
- Amessages that are used by the NMS to query the device for data
- Bunsolicited messages that are sent by the SNMP agent and alert the NMS to a condition on the network
- Cmessages that are used by the NMS to change configuration variables in the agent device
- Dmessages that are sent periodically by the NMS to the SNMP agents that reside on managed devices to query the device for data
18A network administrator issues two commands on a router:
R1(config)# snmp-server host 10.10.50.25 version 2c campus
R1(config)# snmp-server enable traps
What can be concluded after the commands are entered?- ANo traps are sent, because the notification-types argument was not specified yet.
- BTraps are sent with the source IP address as 10.10.50.25.
- CIf an interface comes up, a trap is sent to the server.
- DThe snmp-server enable traps command needs to be used repeatedly if a particular subset of trap types is desired.
19What can be concluded from the produced output?
- AAn ACL was configured to restrict SNMP access to an SNMP manager.
- BThis is the output of the show snmp command without any parameters.
- CThe system contact was not configured with the snmp-server contact command.
- DThe location of the device was not configured with the snmp-server location command
20A SNMP manager has IP address 172.16.1.120. The SNMP manager is unable to change configuration variables on the R1 SNMP agent. What could be the problem?
- AThe ACL of ACL_SNMP has not been implemented on an interface yet.
- BThe IP address of the SNMP manager must be 172.16.1.1.
- CThe SNMP agent should have traps disabled.
- DThe SNMP agent is not configured for write access.
21Router R1 was configured by a network administrator to use SNMP version 2. The following commands were issued:
R1(config)# snmp-server community batonaug ro SNMP_ACL
R1(config)# snmp-server contact Wayne World
R1(config)# snmp-server host 192.168.1.3 version 2c batonaug
R1(config)# ip access-list standard SNMP_ACL
R1(config-std-nacl)# permit 192.168.10.3
Why is the administrator not able to get any information from R1?
- AThe snmp-server enable traps command is missing.
- BThe snmp-server community command needs to include the rw keyword.
- CThere is a problem with the ACL configuration.
- DThe snmp-server location command is missing.
22A network administrator has issued the snmp-server user admin1 admin v3 encrypted auth md5 abc789 priv des 256 key99 command. What are two features of this command? (Choose two.)
- AIt adds a new user to the SNMP group.
- BIt restricts SNMP access to defined SNMP managers.
- CIt forces the network manager to log into the agent to retrieve the SNMP messages.
- DIt uses the MD5 authentication of the SNMP messages.
23Which statement describes the RSPAN VLAN?
- AThe RSPAN VLAN must be the same as the native VLAN.
- BThe RSPAN VLAN can be used to carry secure traffic between switches.
- CThe RSPAN VLAN can be used for remote management of network switches.
- DThe RSPAN VLAN must be the same on both the source and destination switch
24 Which statement describes the function of the SPAN tool used in a Cisco switch?
- AIt supports the SNMP trap operation on a switch.
- BIt provides interconnection between VLANs over multiple switches.
- CIt is a secure channel for a switch to send logging to a syslog server.
- DIt copies the traffic from one switch port and sends it to another switch port that is connected to a monitoring device.
Información
- Descripción
- Information Technology Test sobre Chapter 5, creado por Darth Mole el 13/08/2018.
- Autor
- Darth Mole
- Idioma
- English
- Visitas
- 1
- Historial
- Creado el 13 ago 2018 · actualizado el 13 ago 2018
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test