Semi-Final Exam

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

• MAC address overflow

• Spanning Tree Protocol manipulation

• IP address spoofing

• ARP poisoning

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

• HTTP

• LLDP

• CDP

• FTP

Why is authentication with AAA preferred over a local database method?

• It specifies a different password for each line or port.

• It requires a login and password combination on the console, vty lines, and aux ports.

• It provides a fallback authentication method if the administrator forgets the username or password.

• It uses less network bandwidth.

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server?

• SSH

• 802.1x

• RADIUS

• TACACS

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

• Dynamic ARP Inspection

• IP Source Guard

• Port Security

• DHCP Snooping

True or False? In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

• false

• true

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• Enable port security

• Disable DTP

• Disable STP

• Place unused ports in an unused VLAN

Which of the following encrypts the data on end-devices, which can be decrypted only if a payment is made?

• DDoS

• Ransomware

• Virus

• Worm

Which AAA component is responsible for determining what access is permitted?

• Accounting

• Administration

• Authentication

• Authorization

Which mitigation technique prevents MAC address table overflow attacks?

• DAI

• Firewalls

• Port security

• VPNs