Quiz
Chapter 6
This quiz has question types that open in the usual player.
Questions in this quiz (20)
1[blank_start]port security[blank_end] a security feature that should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch.
- Aport security
2The spanning-tree enhancement that prevents the spanning-tree topology from changing by blocking a port that receives a superior BPDU is the [blank_start]root guard[blank_end].
- Aroot guard
3Enabling traffic from one VLAN to be seen by another VLAN is the goal of a VLAN [blank_start]hopping[blank_end] attack.
- Ahopping
4[blank_start]port security[blank_end] is a security countermeasure is effective for preventing CAM table overflow attacks.
- Aport security
5The STP [blank_start]loop[blank_end] Guard feature provides protection against Layer 2 loops by recognizing unidirectional links and moving them to the blocking state.
- Aloop
6Which feature is part of the Antimalware Protection security solution?
- Afile retrospection
- Buser authentication and authorization
- Cdata loss prevention
- Dspam blocking
7What is involved in an IP address spoofing attack?
- AA rogue node replies to an ARP request with its own MAC address indicated for the target IP address.
- BA rogue DHCP server provides false IP configuration parameters to legitimate DHCP clients.
- CBogus DHCPDISCOVER messages are sent to consume all the available IP addresses on a DHCP server.
- DA legitimate network IP address is hijacked by a rogue node.
8What is the best way to prevent a VLAN hopping attack?
- ADisable STP on all nontrunk ports.
- BUse VLAN 1 as the native VLAN on trunk ports.
- CDisable trunk negotiation for trunk ports and statically set nontrunk ports as access ports.
- DUse ISL encapsulation on all trunk links.
9What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?
- Aenforcing the placement of root bridges
- Bpreventing rogue switches from being added to the network
- Cpreventing buffer overflow attacks
- Dprotecting against Layer 2 loops
10What is the role of the Cisco NAC Manager in implementing a secure networking infrastructure?
- Ato assess and enforce security policy compliance in the NAC environment
- Bto perform deep inspection of device security profiles
- Cto define role-based user access and endpoint security policies
- Dto provide post-connection monitoring of all endpoint devices
11What is the role of the Cisco NAC Server within the Cisco Secure Borderless Network Architecture?
- Aassessing and enforcing security policy compliance in the NAC environment
- Bproviding the ability for company employees to create guest accounts
- Cproviding post-connection monitoring of all endpoint devices
- Ddefining role-based user access and endpoint security policies
12What is the only type of traffic that is forwarded by a PVLAN protected port to other protected ports?
- Amanagement
- Bcontrol
- Cbroadcast
- Duser
13At which layer of the OSI model does Spanning Tree Protocol operate?
- ALayer 1
- BLayer 2
- CLayer 3
- DLayer 4
14What is the only type of port that an isolated port can forward traffic to on a private VLAN?
- Aa promiscuous port
- Ba community port
- Canother isolated port
- Dany access port in the same PVLAN
15Which STP stability mechanism is used to prevent a rogue switch from becoming the root switch?
- ASource Guard
- BBDPU Guard
- Croot guard
- Dloop guard
16What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?
- Aport security
- BBDPU Guard
- Croot guard
- DDHCP snooping
17How can a user connect to the Cisco Cloud Web Security service directly?
- Athrough the connector that is integrated into any Layer 2 Cisco switch
- Bby using a proxy autoconfiguration file in the end device
- Cby accessing a Cisco CWS server before visiting the destination web site
- Dby establishing a VPN connection with the Cisco CWS
18What is a recommended best practice when dealing with the native VLAN?
- ATurn off DTP.
- BUse port security.
- CAssign it to an unused VLAN.
- DAssign the same VLAN number as the management VLAN.
19In what situation would a network administrator most likely implement root guard?
- Aon all switch ports (used or unused)
- Bon all switch ports that connect to a Layer 3 device
- Con all switch ports that connect to host devices
- Don all switch ports that connect to another switch that is not the root bridge
20What is the behavior of a switch as a result of a successful CAM table attack?
- AThe switch will forward all received frames to all other ports.
- BThe switch will drop all received frames.
- CThe switch interfaces will transition to the error-disabled state.
- DThe switch will shut down.
Information
- Description
- ITELEC Quiz on Chapter 6, created by K eations on 14/12/2018.
- Author
- K eations
- Language
- English
- Views
- 0
- History
- Created on 14 Dec 2018 · updated on 14 Dec 2018
- Tags
- Rating
- No ratings yet Rate this quiz