CN2-Chapter2

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

• ROM
• RAM
• NVRAM
• Flash

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

• Shutdown
• IP DHCP Snooping
• Switchport
• Port-Security

What is a recommended best practice when dealing with the native VLAN?

• Turn off DTP
• Use Port Security
• Assign to Unused VLAN
• Assign to Management VLAN

What Layer 2 attack is mitigated by disabling Dynamic Trunking Protocol?

• VLAN Hopping
• DHCP Spoofing
• ARP Poisoning
• ARP Spoofing

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

• IP DHCP Snooping
• IP DHCP Snooping VLAN
• IP DHCP Snooping Trust
• IP DHCP Snooping Limit Rate

Which procedure is recommended to mitigate the chances of ARP spoofing?

• Enable Por Security Globally
• Enable DHCP Snooping on Selected VLANs
• Enable DAI on the Management VLAN
• Enable IP Source Guard on Trusted Ports

On what switch ports should PortFast be enabled to enhance STP stability?

• All end-user ports
• Ports attach to another switch
• all trunk ports
• Ports attach to another Router