quiz 7

22. What are the two methods that are used by a wireless NIC to discover an AP?

• a. delivering a broadcast frame and initiating a three-way handshake

• b. receiving a broadcast beacon frame and transmitting a probe request

• c. initiating a three-way handshake and transmitting a probe request

• d. sending an ARP request and initiating a three-way handshake

23. What are three techniques for mitigating VLAN attacks?

• a. Enable trunking manually., Disable DTP, and Set the native VLAN to an unused VLAN

• b. Disable DTP, Enable Source Guard, and Use private VLANs

• c. Enable Source Guard, Use private VLANs, and Enable BPDU guard.

• d. Set the native VLAN to an unused VLAN, use private VLANs, and Enable BPDU guard

What are two protocols that are used by AAA to authenticate users against a central database of usernames and password?

• a. SSH and CHAP

• b. HTTPS and TACACS+

• c. TACACS+ and RADIUS

• d. RADIUS and CHAP

25. What device is considered a supplicant during the 802.1X authentication process?

• a. the router that is serving as the default gateway

• b. the authentication server that is performing client authentication

• c. the client that is requesting authentication

• d. the switch that is controlling network access

What is a wireless security mode that requires a RADIUS server to authenticate wireless users?

• a. personal

• b. shared key

• c. enterprise

• d. WEP

27. What is an advantage of SSID cloaking?

• a. Clients will have to manually identify the SSID to connect to the network.

• b. It is the best way to secure a wireless network.

• c. SSIDs are very difficult to discover because APs do not broadcast them.

• d. It provides free Internet access in public locations where knowing the SSID is of no concern.

28. What is the function provided by CAPWAP protocol in a corporate wireless network?

• a. CAPWAP creates a tunnel on Transmission Control Protocol (TCP) ports in order to allow a WLC to configure an autonomous access point.

• b. CAPWAP provides the encapsulation and forwarding of wireless user traffic between an access point and a wireless LAN controller.

• c. CAPWAP provides connectivity between an access point using IPv6 addressing and a wireless client using IPv4 addressing.

• d. CAPWAP provides the encryption of wireless user traffic between an access point and a wireless client.

29. What is the result of a DHCP starvation attack?

• a. The attacker provides incorrect DNS and default gateway information to clients.

• b. The IP addresses assigned to legitimate clients are hijacked.

• c. Clients receive IP address assignments from a rogue DHCP server.

• d. Legitimate clients are unable to lease IP addresses.

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• a. Disable DTP.

• b. Disable STP.

• c. Enable port security.

• d. Place unused ports in an unused VLAN.

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

• a. Enable CDP on edge devices, and enable LLDP on interior devices.

• b. Use the open standard LLDP rather than CDP.

• c. Use the default router settings for CDP and LLDP.

• d. Disable both protocols on all interfaces where they are not required.