Test 7 - CCNA 2

What is a recommended best practice when dealing with the native VLAN?

• Use port security.

• Turn off DTP.

• Assign it to an unused VLAN.

• Assign the same VLAN number as the management VLAN.

Answer explanation

Explanation: Port security cannot be enabled on a trunk and trunks are the only types of ports that have a native VLAN. Even though turning DTP off on a trunk is a best practice, it does not have anything to do with native VLAN risks. To prevent security breaches that take advantage of the native VLAN, place the native VLAN in an unused VLAN other than VLAN 1. The management VLAN should also be an unused VLAN that is different from the native VLAN and something other than VLAN 1.

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

What is the best way to prevent a VLAN hopping attack?

• Use ISL encapsulation on all trunk links.

• Disable STP on all nontrunk ports.

• Use VLAN 1 as the native VLAN on trunk ports.

• Disable trunk negotiation for trunk ports and statically set nontrunk ports as access ports.

Answer explanation

Explanation: VLAN hopping attacks rely on the attacker being able to create a trunk link with a switch. Disabling DTP and configuring user-facing ports as static access ports can help prevent these types of attacks. Disabling the Spanning Tree Protocol (STP) will not eliminate VLAN hopping attacks.

Which two commands can be used to enable PortFast on a switch? (Choose two.)

• S1(config-if)# enable spanning-tree portfast

• S1(config-if)# spanning-tree portfast

• S1(config)# enable spanning-tree portfast default

• S1(config)# spanning-tree portfast default

• S1(config-line)# spanning-tree portfast

Answer explanation

Explanation: PortFast can be configured on all nontrunking ports using the spanning-tree portfast default global configuration command. Alternatively, PortFast can be enabled on an interface using the spanning-tree portfast interface configuration command.

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

A network administrator is configuring DAI on a switch. Which command should be used on the uplink interface that connects to a router?

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

Answer explanation

Explanation: When MAC addresses are automatically learned by using the sticky command option, the learned MAC addresses are added to the running configuration, which is stored in RAM.

Which port security feature enables switches to automatically learn and retain MAC addresses for each port?

• Auto secure MAC addresses

• Dynamic secure MAC addresses

• Static secure MAC addresses

• Sticky secure MAC addresses

Answer explanation

Explanation: With sticky secure MAC addressing, the MAC addresses can be either dynamically learned or manually configured and then stored in the address table and added to the running configuration file. In contrast, dynamic secure MAC addressing provides for dynamically learned MAC addressing that is stored only in the address table.

In the context of mobile devices, what does the term tethering involve?

• connecting a mobile device to a USB port on a computer in order to charge the mobile device

• connecting a mobile device to another mobile device or computer to share a network connection

• connecting a mobile device to a 4G cellular network

• connecting a mobile device to a hands-free headset

Answer explanation

Explanation: Tethering allows a laptop or PC to use the Internet connection of a mobile device such as a cell phone, usually through a cellular data connection. This allows devices to connect to the Internet in locations where there is no Wi-Fi or cabled connection, but where there is still a cellular data connection.

Which feature of 802.11n wireless access points allows them to transmit data at faster speeds than previous versions of 802.11 Wi-Fi standards did?

Answer explanation

Explanation: Multiple-input multiple-output (MIMO) technology allows 802.11n devices to use multiple antennas in order to increase the available bandwidth for the wireless network.