Test
CCNA Security Chapter 6
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (24)
1What is the only type of port that an isolated port can forward traffic to on a private VLAN?
- Aa community port
- Ba promiscuous port
- Canother isolated port
- Dany access port in the same PVLAN
2Which three functions are provided under Cisco NAC framework solution? (Choose three.)
- AVPN connection
- BAAA services
- Cintrusion prevention
- Dscanning for policy compliance
- Esecure connection to servers
- Fremediation for noncompliant devices
3How can a user connect to the Cisco Cloud Web Security service directly?
- Athrough the connector that is integrated into any Layer 2 Cisco switch
- Bby using a proxy autoconfiguration file in the end device
- Cby accessing a Cisco CWS server before visiting the destination web site
- Dby establishing a VPN connection with the Cisco CWS
4In what situation would a network administrator most likely implement root guard?
- Aon all switch ports (used or unused)
- Bon all switch ports that connect to a Layer 3 device
- Con all switch ports that connect to host devices
- Don all switch ports that connect to another switch
- Eon all switch ports that connect to another switch that is not the root bridge
5Which feature is part of the Antimalware Protection security solution?
- Afile retrospection
- Buser authentication and authorization
- Cdata loss prevention
- Dspam blocking
6Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?
- Aport security
- Broot guard
- Cstorm control
- DBPDU filter
7What two mechanisms are used by Dynamic ARP inspection to validate ARP packets for IP addresses that are dynamically assigned or IP addresses that are static? (Choose two.)
- AMAC-address-to-IP-address bindings
- BSource Guard
- CARP ACLs
- DRARP
- EIP ACLs
8Which mitigation technique would prevent rogue servers from providing false IP configuration parameters to clients?
- Adisabling CDP on edge ports
- Bimplementing port security
- Cturning on DHCP snooping
- Dimplementing port-security on edge ports
9What security countermeasure is effective for preventing CAM table overflow attacks?
- ADHCP snooping
- BDynamic ARP Inspection
- Cport security
- DIP source guard
10What is the role of the Cisco NAC Guest Server within the Cisco Borderless Network architecture?
- AIt provides post-connection monitoring of all endpoint devices.
- BIt provides the ability for creation and reporting of guest accounts.
- CIt defines role-based user access and endpoint security policies.
- DIt performs deep inspection of device security profiles.
11Which spanning-tree enhancement prevents the spanning-tree topology from changing by blocking a port that receives a superior BPDU?
- Aroot guard
- BPortFast
- CBDPU filter
- DBPDU guard
12What is the role of the Cisco NAC Server within the Cisco Secure Borderless Network Architecture?
- Adefining role-based user access and endpoint security policies
- Bassessing and enforcing security policy compliance in the NAC environment
- Cproviding the ability for company employees to create guest accounts
- DProviding post-connection monitoring of all endpoint devices
13What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?
- AIP address spoofing
- BDHCP starvation
- CDHCP spoofing
- DCAM table attack
14What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?
- Aport security
- Broot guard
- CBPDU Guard
- DDHCP snooping
15What is the role of the Cisco NAC Manager in implementing a secure networking infrastructure?
- Ato assess and enforce security policy compliance in the NAC environment
- Bto provide post-connection monitoring of all endpoint devices
- Cto define role-based user access and endpoint security policies
- Dto perform deep inspection of device security profiles
16What component of Cisco NAC is responsible for performing deep inspection of device security profiles?
- ACisco NAC Server
- BCisco NAC Profiler
- CCisco NAC Agent
- DCisco NAC Manager
17What protocol should be disabled to help mitigate VLAN hopping attacks?
- AARP
- BDTP
- CSTP
- DCDP
18What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?
- Apreventing rogue switches from being added to the network
- Bpreventing buffer overflow attacks
- Cenforcing the placement of root bridges
- Dprotecting against Layer 2 loops
19Which STP stability mechanism is used to prevent a rogue switch from becoming the root switch?
- ASource Guard
- BBPDU guard
- Croot guard
- Dloop guard
20What are three techniques for mitigating VLAN hopping attacks? (Choose three.)
- AEnable Source Guard.
- BUse private VLANs.
- CEnable trunking manually.
- DDisable DTP.
- EEnable BPDU guard.
- FSet the native VLAN to an unused VLAN.
21Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?
- AThe Fa0/24 interface of S1 is configured with the same MAC address as the Fa0/2 interface.
- BThe connection between S1 and PC1 is via a crossover cable.
- CS1 has been configured with a switchport port-security aging command.
- DThe MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address.
22Which two functions are provided by Network Admission Control? (Choose two.)
- Aenforcing network security policy for hosts that connect to the network
- Bprotecting a switch from MAC address table overflow attacks
- Cstopping excessive broadcasts from disrupting network traffic
- Densuring that only authenticated hosts can access the network
- Elimiting the number of MAC addresses that can be learned on a single switch port
23Two devices that are connected to the same switch need to be totally isolated from one another. Which Cisco switch security feature will provide this isolation?
- APVLAN Edge
- BSPAN
- CBPDU guard
- DDTP
24What is the behavior of a switch as a result of a successful CAM table attack?
- AThe switch interfaces will transition to the error-disabled state.
- BThe switch will shut down
- CThe switch will forward all received frames to all other ports
- DThe switch will drop all received frames.
Información
- Descripción
- Chapter 6 Test sobre CCNA Security Chapter 6, creado por A H el 08/05/2018.
- Autor
- A H
- Idioma
- English
- Visitas
- 125
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test