CH 5 & 6 HW and exam review

1

Refer to the exhibit. A network administrator is configuring an IOS IPS. Which statement describes the IPS
signatures that are enabled?

1

What is a zero-day attack?

1

Which command releases the dynamic resources associated with the Cisco IOS IPS on a Cisco router?

1

What are two actions that an IPS can perform whenever a signature detects the activity for which it is
configured? (Choose two.)

1

What is a disadvantage of network-based IPS devices?

1

What are two disadvantages of using an IDS? (Choose two.)

1

A network administrator was testing an IPS device by releasing multiple packets into the network. The administrator examined the log and noticed that a group of alarms were generated by the IPS that identified normal user traffic. Which term describes this group of alarms?

1

Which Cisco feature sends copies of frames entering one port to a different port on the same switch in order to perform traffic analysis?

1

What is an IPS signature?

1

What is a disadvantage of a pattern-based detection mechanism?

1

Which two devices are examples of endpoints susceptible to malware-related attacks? (Choose two.)

1

What would be the primary reason an attacker would launch a MAC address overflow attack?

1

What is a recommended best practice when dealing with the native VLAN?

1

What is the best way to prevent a VLAN hopping attack?

1

What mitigation plan is best for thwarting a DoS attack that is creating a switch buffer overflow?

1

Refer to the exhibit above. What happens when Host 1 attempts to send data?

1

All access ports on a switch are configured with the administrative mode of dynamic auto. An attacker, connected to one of the ports, sends a malicious DTP frame. What is the intent of the attacker?

1

Refer to the exhibit. A network engineer is securing a network against DHCP spoofing attacks. On all switches, the engineer applied the ip dhcp snooping command and enabled DHCP snooping on all VLANs with the ip dhcp snooping vlan command. What additional step should be taken to configure the security required on the network?

1

Which countermeasure can be implemented to determine the validity of an ARP packet, based on the valid MAC-address-to-IP address bindings stored in a DHCP snooping database?

1

What are two purposes for an attacker launching a MAC table flood? (Choose two.)

1

Which type of attacks can be mitigated by port security?

1

What are two actions a hacker may take in a VLAN hopping attack? (Choose two.)

CCNA Security CH 5 & 6 HW and exam review

CH 5 & 6 HW and exam review

Refer to the exhibit. A network administrator is configuring an IOS IPS. Which statement describes the IPS signatures that are enabled?

What is a zero-day attack?

Which command releases the dynamic resources associated with the Cisco IOS IPS on a Cisco router?

What are two actions that an IPS can perform whenever a signature detects the activity for which it is configured? (Choose two.)

What is a disadvantage of network-based IPS devices?

What are two disadvantages of using an IDS? (Choose two.)

A network administrator was testing an IPS device by releasing multiple packets into the network. The administrator examined the log and noticed that a group of alarms were generated by the IPS that identified normal user traffic. Which term describes this group of alarms?

Which Cisco feature sends copies of frames entering one port to a different port on the same switch in order to perform traffic analysis?

What is an IPS signature?

What is a disadvantage of a pattern-based detection mechanism?

Which two devices are examples of endpoints susceptible to malware-related attacks? (Choose two.)

What would be the primary reason an attacker would launch a MAC address overflow attack?

What is a recommended best practice when dealing with the native VLAN?

What is the best way to prevent a VLAN hopping attack?

What mitigation plan is best for thwarting a DoS attack that is creating a switch buffer overflow?

Refer to the exhibit above. What happens when Host 1 attempts to send data?

All access ports on a switch are configured with the administrative mode of dynamic auto. An attacker, connected to one of the ports, sends a malicious DTP frame. What is the intent of the attacker?

Which countermeasure can be implemented to determine the validity of an ARP packet, based on the valid MAC-address-to-IP address bindings stored in a DHCP snooping database?

What are two purposes for an attacker launching a MAC table flood? (Choose two.)

Refer to the exhibit. A network administrator is configuring an IOS IPS. Which statement describes the IPS
signatures that are enabled?

What are two actions that an IPS can perform whenever a signature detects the activity for which it is
configured? (Choose two.)