Quiz-Session13

Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv6 load balancing?

• • GLBP

• • GLBP for IPv6

• • VRRPv3

• • VRRPv2

Which FHRP implementation is Cisco-proprietary and permits only one router in a group to forward IPv6 packets?

• • VRRPv3

• • HSRP

• • HSRP for IPv6

• • VRRPv2

Which FHRP implementation is a nonproprietary IPv4-only election protocol with limited scalability?

• • VRRPv2

• • GLBP

• • GLBP for IPv6

• • IRDP

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• • ARP spoofing

• • DHCP starvation

• • IP address spoofing

• • MAC address flooding

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• • Disable DTP.

• • Disable STP.

• • Enable port security.

• • Place unused ports in an unused VLAN.

Which three Cisco products focus on endpoint security solutions? (Choose three.)

• • IPS Sensor Appliance

• • Web Security Appliance

• • Email Security Appliance

• • SSL/IPsec VPN Appliance

• • NAC Appliance

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

• • local AAA over RADIUS

• • server-based AAA

• • local AAA

• • server-based AAA over RADIUS

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

• • Enable CDP on edge devices, and enable LLDP on interior devices.

• • Use the open standard LLDP rather than CDP.

• • Use the default router settings for CDP and LLDP.

• • Disable both protocols on all interfaces where they are not required.

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

• • SNMP

• • TFTP

• • SSH

• • SCP

Which type of VLAN-hopping attack may be prevented by designating an unused VLAN as the native VLAN?

• • DHCP spoofing

• • DHCP starvation

• • VLAN double-tagging

• • DTP spoofing