Cisco 2, Module 10

What is the purpose of AAA accounting?

• 1. to determine which operations the user can perform

• 1. to determine which resources the user can access

• 1. to collect and report application usage

• 1. to prove users are who they say they are

Which three Cisco products focus on endpoint security solutions? (Choose three.)

• NAC Appliance

• Adaptive Security Appliance

• Email security Appliance

• Web Security Appliance

• SSL/IPsec VPN Appliance

What is involved in an IP address spoofing attack?

• 1. A rogue DHCP server provides false IP configuration parameters to legitimate DHCP clients.

• 1. A legitimate network IP address is hijacked by a rogue node.

• 1. A rogue node replies to an ARP request with its own MAC address indicated for the target IP address.

• 1. Bogus DHCPDISCOVER messages are sent to consume all the available IP addresses on a DHCP server.

What three services are provided by the AAA framework? (Choose three.)

• authorization

• authentication

• accounting

• automation

• autobalancing

Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?

• 1. authentication

• 1. accounting

• 1. authorization

• 1. auditing

• 1. accessibility

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server?

• RADIUS

• SSH

• TACACS

• 802.1x

What two protocols are supported on Cisco devices for AAA communications? (Choose two.)

• HSRP

• TACACS+

• LLDP

• RADIUS

• VTP

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

• HTTP

• LLDP

• FTP

• CDP

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?

• Layer 4

• Layer 3

• Layer 2

• Layer 7

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• ARP spoofing

• IP address spoofing

• MAC address flooding

• DHCP starvation