Cspring10-13

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• ARP spoofing
• DHCP starvation
• IP address spoofing
• MAC address flooding

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• Disable DTP.
• Disable STP.
• Enable port security.
• Place unused ports in an unused VLAN.

Which three Cisco products focus on endpoint security solutions? (Choose three.)

• IPS Sensor Appliance
• Web Security Appliance
• Email Security Appliance
• SSL/IPsec VPN Appliance
• NAC Appliance

? In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

• true
• false

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

• server-based AAA over TACACS+
• local AAA over RADIUS
• server-based AAA
• local AAA over TACACS+
• local AAA

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

• Enable CDP on edge devices, and enable LLDP on interior devices.
• Use the open standard LLDP rather than CDP.
• Use the default router settings for CDP and LLDP.
• Disable both protocols on all interfaces where they are not required.

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

• SNMP
• TFTP
• SSH
• SCP

Which statement describes the behavior of a switch when the MAC address table is full?

• It treats frames as unknown unicast and floods all incoming frames to all ports on the switch.
• It treats frames as unknown unicast and floods all incoming frames to all ports across multiple switches.
• It treats frames as unknown unicast and floods all incoming frames to all ports within the local VLAN.
• It treats frames as unknown unicast and floods all incoming frames to all ports within the collision domain.

What device is considered a supplicant during the 802.1X authentication process?

• the router that is serving as the default gateway
• the authentication server that is performing client authentication
• the client that is requesting authentication
• the switch that is controlling network access

Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration?

• Frames from PC1 will be forwarded since the switchport port-security violation command is missing.
• Frames from PC1 will be forwarded to its destination, and a log entry will be created.
• Frames from PC1 will be forwarded to its destination, but a log entry will not be created.
• Frames from PC1 will cause the interface to shut down immediately, and a log entry will be made.
• Frames from PC1 will be dropped, and there will be no log of the violation.