Test por d94829 d94829, creado hace más de 1 año

CCNA Security Chapter 6 Exam

579

3

0

	Creado por d94829 d94829 hace más de 6 años

Cerrar

CCNA Security Chapter 6 Exam

CCNA Security Chapter 6 Exam

Por favor espera - en proceso…

Pregunta 1 de 24

1

Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?

Selecciona una de las siguientes respuestas posibles:

The connection between S1 and PC1 is via a crossover cable
The Fa0/24 interface of S1 is configured with the same MAC address as the Fa0/2 interface
S1 has been configured with a switchport port-security aging command
The MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address

Explicación

Pregunta 2 de 24

1

Two devices that are connected to the same switch need to be totally isolated from one another. Which Cisco switch security feature will provide this isolation?

Selecciona una de las siguientes respuestas posibles:

PVLAN Edge
DTP
SPAN
BPDU guard

Explicación

Pregunta 3 de 24

1

Which two functions are provided by Network Admission Control?

Selecciona una o más de las siguientes respuestas posibles:

protecting a switch from MAC address table overflow attacks
enforcing network security policy for hosts that connect to the network
ensuring that only authenticated hosts can access the network
stopping excessive broadcasts from disrupting network traffic
limiting the number of MAC addresses that can be learned on a single switch port

Explicación

Pregunta 4 de 24

1

Which spanning-tree enhancement prevents the spanning-tree topology from changing by blocking a port that receives a superior BPDU?

Selecciona una de las siguientes respuestas posibles:

BDPU filter
PortFast
BPDU guard
root guard

Explicación

Pregunta 5 de 24

1

Which security feature should be enabled in order to prevent an attacker from overflowing the MAC address table of a switch?

Selecciona una de las siguientes respuestas posibles:

root guard
port security
storm control
BPDU filter

Explicación

Pregunta 6 de 24

1

In what situation would a network administrator most likely implement root guard?

Selecciona una de las siguientes respuestas posibles:

on all switch ports (used or unused)
on all switch ports that connect to a Layer 3 device
on all switch ports that connect to host devices
on all switch ports that connect to another switch
on all switch ports that connect to another switch that is not the root bridge

Explicación

Pregunta 7 de 24

1

What component of Cisco NAC is responsible for performing deep inspection of device security profiles?

Selecciona una de las siguientes respuestas posibles:

Cisco NAC Profiler
Cisco NAC Agent
Cisco NAC Manager
Cisco NAC Server

Explicación

Pregunta 8 de 24

1

What is the role of the Cisco NAC Manager in implementing a secure networking infrastructure?

Selecciona una de las siguientes respuestas posibles:

to define role-based user access and endpoint security policies
to assess and enforce security policy compliance in the NAC environment
to perform deep inspection of device security profiles
to provide post-connection monitoring of all endpoint devices

Explicación

Pregunta 9 de 24

1

What is the role of the Cisco NAC Server within the Cisco Secure Borderless Network Architecture?

Selecciona una de las siguientes respuestas posibles:

providing the ability for company employees to create guest accounts
providing post-connection monitoring of all endpoint devices
defining role-based user access and endpoint security policies
assessing and enforcing security policy compliance in the NAC environment

Explicación

Pregunta 10 de 24

1

What is the role of the Cisco NAC Guest Server within the Cisco Borderless Network architecture?

Selecciona una de las siguientes respuestas posibles:

It defines role-based user access and endpoint security policies.
It provides the ability for creation and reporting of guest accounts
It provides post-connection monitoring of all endpoint devices
It performs deep inspection of device security profiles

Explicación

Pregunta 11 de 24

1

Which three functions are provided under Cisco NAC framework solution? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

VPN connection
AAA services
intrusion prevention
scanning for policy compliance
secure connection to servers
remediation for noncompliant devices

Explicación

Pregunta 12 de 24

1

Which feature is part of the Antimalware Protection security solution?

Selecciona una de las siguientes respuestas posibles:

file retrospection
user authentication and authorization
data loss prevention
spam blocking

Explicación

Pregunta 13 de 24

1

What security countermeasure is effective for preventing CAM table overflow attacks?

Selecciona una de las siguientes respuestas posibles:

DHCP snooping
Dynamic ARP Inspection
IP source guard
port security

Explicación

Pregunta 14 de 24

1

What is the behavior of a switch as a result of a successful CAM table attack?

Selecciona una de las siguientes respuestas posibles:

The switch will forward all received frames to all other ports
The switch will drop all received frames
The switch interfaces will transition to the error-disabled state
The switch will shut down

Explicación

Pregunta 15 de 24

1

What additional security measure must be enabled along with IP Source Guard to protect against address spoofing?

Selecciona una de las siguientes respuestas posibles:

port security
BPDU Guard
root guard
DHCP snooping

Explicación

Pregunta 16 de 24

1

What are three techniques for mitigating VLAN hopping attacks? (Choose three.)

Selecciona una o más de las siguientes respuestas posibles:

Set the native VLAN to an unused VLAN
Disable DTP
Enable Source Guard
Enable trunking manually
Enable BPDU guard
Use private VLANs

Explicación

Pregunta 17 de 24

1

What two mechanisms are used by Dynamic ARP inspection to validate ARP packets for IP addresses that are dynamically assigned or IP addresses that are static? (Choose two.)

Selecciona una o más de las siguientes respuestas posibles:

MAC-address-to-IP-address bindings
RARP
ARP ACLs
IP ACLs
Source Guard

Explicación

Pregunta 18 de 24

1

What protocol should be disabled to help mitigate VLAN hopping attacks?

Selecciona una de las siguientes respuestas posibles:

STP
ARP
CDP
DTP

Explicación

Pregunta 19 de 24

1

What network attack seeks to create a DoS for clients by preventing them from being able to obtain a DHCP lease?

Selecciona una de las siguientes respuestas posibles:

DHCP spoofing
CAM table attack
IP address spoofing
DHCP starvation

Explicación

Pregunta 20 de 24

1

What is the only type of port that an isolated port can forward traffic to on a private VLAN

Selecciona una de las siguientes respuestas posibles:

a community port
a promiscuous port
another isolated port
any access port in the same PVLAN

Explicación

Pregunta 21 de 24

1

Which STP stability mechanism is used to prevent a rogue switch from becoming the root switch?

Selecciona una de las siguientes respuestas posibles:

Source Guard
BPDU guard
root guard
loop guard

Explicación

Pregunta 22 de 24

1

How can a user connect to the Cisco Cloud Web Security service directly?

Selecciona una de las siguientes respuestas posibles:

through the connector that is integrated into any Layer 2 Cisco switch
by using a proxy autoconfiguration file in the end device
by accessing a Cisco CWS server before visiting the destination web site
by establishing a VPN connection with the Cisco CWS

Explicación

Pregunta 23 de 24

1

What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?

Selecciona una de las siguientes respuestas posibles:

enforcing the placement of root bridges
preventing buffer overflow attacks
preventing rogue switches from being added to the network
protecting against Layer 2 loops

Explicación

Pregunta 24 de 24

1

Which mitigation technique would prevent rogue servers from providing false IP configuration parameters to clients

Selecciona una de las siguientes respuestas posibles:

implementing port-security on edge ports
implementing port security
turning on DHCP snooping
disabling CDP on edge ports

Explicación

Revisar respuesta