105 10-13 Review

(Module 10)

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?​

• Layer 2

• Layer 3

• Layer 4

• Layer 7

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

• ARP Poisoning

• Spanning Tree Protocol Manipulation

• MAC address overflow

• IP address spoofing

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server?

• RADIUS

• SSH

• 802.1x

• TACACS

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

• DHCP Snooping

• Dynamic ARP Inspection

• IP Source Gaurd

• Port Security

What is the purpose of AAA accounting?

• to collect and report application usage

• to determine which resources the user can access

• to prove users are who they say they are

• to determine which operations the user can perform

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• DHCP starvation

• IP address spoofing

• MAC address flooding

• ARP spoofing

What is involved in an IP address spoofing attack?

• Bogus DHCPDISCOVER messages are sent to consume all the available IP addresses on a DHCP server.

• A rogue node replies to an ARP request with its own MAC address indicated for the target IP address.

• A legitimate network IP address is hijacked by a rogue node.

• A rogue DHCP server provides false IP configuration parameters to legitimate DHCP clients.

What three services are provided by the AAA framework? (Choose three.)

• Automation

• Authentication

• Authorization

• Accounting

• Assistance

Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?

• Authorization

• Authentication

• Auditing

• Accessibility

(Module 11)

What is a recommended best practice when dealing with the native VLAN?

• Turn off DTP

• Assign the same VLAN number as the management VLAN

• Assign it to an unused VLAN

• Use port security