сиська 107-160

What are three techniques for mitigating VLAN attacks? (Choose three

• Use private VLANs.

• • Enable BPDU guard.

• • Enable trunking manually

• • Disable DTP.

• • Set the native VLAN to an unused VLAN.

In which situation would a technician use the show interfaces switch command?

• to determine if remote access is enabled

• when packets are being dropped from a particular directly attached host

• when an end device can reach local devices, but not remote devices

• to determine the MAC address of a directly attached network device on a particular interface

 What is a drawback of the local database method of securing device access that can be solved by using AAA with centralized servers?

• There is no ability to provide accountability.

• User accounts must be configured locally on each device, which is an unscalable authentication solution.

• It is very susceptible to brute-force attacks because there is no username

• The passwords can only be stored in plain text in the running configuration.

What action does a DHCPv4 client take if it receives more than one DHCPOFFER from multiple DHCP servers?

• It sends a DHCPREQUEST that identifies which lease offer the client is accepting.

• It sends a DHCPNAK and begins the DHCP process over again.

• It discards both offers and sends a new DHCPDISCOVER.

• It accepts both DHCPOFFER messages and sends a DHCPACK.

Refer to the exhibit. The network administrator is configuring the port security feature on switch SWC. The administrator issued the command show port-security interface fa 0/2 to verify the configuration. What can be concluded from the output that is shown? (Choose three.)

• Three security violations have been detected on this interface.

• • This port is currently up.

• The port is configured as a trunk link.

• Security violations will cause this port to shut down immediately.

• The switch port mode for this interface is access mode.

What method of wireless authentication is dependent on a RADIUS authentication server?

• WEP

• WPA Personal

• WPA2 Personal

• WPA2 Enterprise

A network administrator has found a user sending a double-tagged 802.1Q frame to a switch. What is the best solution to prevent this type of attack?

• The native VLAN number used on any trunk should be one of the active data VLANs.

• The VLANs for user access ports should be different VLANs than any native VLANs used on trunk ports.

• Trunk ports should be configured with port security.

• Trunk ports should use the default VLAN as the native VLAN number.

Refer to the exhibit. Which two conclusions can be drawn from the output? (Choose two.)

• The EtherChannel is down.

• The port channel ID is 2.

• The port channel is a Layer 3 channel.

• The bundle is fully operational.

• The load-balancing method used is source port to destination port.

On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to configure a particular WLAN with a WPA2 policy?

• WLANs

• SECURITY

• WIRELESS

• MANAGEMENT

Refer to the exhibit. A network engineer is configuring IPv6 routing on the network. Which command issued on router HQ will configure a default route to the Internet to forward packets to an IPv6 destination network that is not listed in the routing table?

• ipv6 route ::/0 serial 0/0/0

• ip route 0.0.0.0 0.0.0.0 serial 0/1/1

• • ipv6 route ::1/0 serial 0/1/1

• ipv6 route ::/0 serial 0/1/1