Cisco Switch Security

SSH is assigned to TCP port

• 23

• 21

• 22

• 80

Why does SSH replace a Telnet?

• Telnet provides a bidirectional interactive text-oriented communication facility using a virtual terminal connection

• Telnet is an older protocol that uses unsecure plaintext

• Telnet protocol is a longstanding solution for establishing a remote connection

• Telnet is a text-only protocol

What is the command to verify the switch supports SSH?

• show ip ssh

• ip ssh version 2

• show ssh version

• show ip interface ssh

S1(config)# line vty 0 15

S1(config-line)# transport input none

S1(config-line)# login local

S1(config-line)# end

Verify which line is wrong and choose the correct answer

• line vty 0 4

• transport input telnet

• transport input ssh

• transport output ssh

What is the command to generate RSA key pairs?

• service password rsa encryption

• crypto key zeroize rsa

• crypto rsa encrption

• crypto key generate rsa

Choose a simple method that many administrators use to help secure the network from unauthorized access

• Disable all unused switch vitual interface

• Disable all unused ports

• Disable port aggregation

What is the main purpose of Switch Port Security?

• Its limits the number of valid MAC addresses allowed on a port

• The MAC addresses of legitimate devices are denied access

• To protect the switch from a DDOS attack

• Brute Force attack may be occur if Switch Port Security is not implemented

Choose the correct secure MAC Address Types

• Static secure MAC addresss

• Stack secure MAC addresss

• Disable secure MAC addresss

• Sticky secure MAC addresss

Which Port Security violation modes will send a syslog message after a violation occurs?

• Protect

• Restrict

• Shutdown

• Err-Disable

What is the default Violation mode on a Cisco Switch?

• Protect

• Restrict

• Shutdown

• Err-Disable