Switch Security Quiz

What is the primary goal of a Distributed Denial of Service (DDoS) attack?

• To steal confidential information

• To disrupt public access to a website or service

• To install antivirus software on the network

• To speed up internet connectivity

What is the main function of the Cisco Email Security Appliance (ESA)?

• Filters malicious URLs

• Encrypts web traffic

• Detects and blocks email-based threats

• Dynamically assigns IP addresses

What are the three core components of AAA?

• Authentication, Application, Access

• Authentication, Authorization, Accounting

• Access, Addressing, Application

• Antivirus, Authorization, Accounting

Which protocol does IEEE 802.1X use for port-based access control?

• HTTP

• SSL

• EAP

• FTP

Which attack takes advantage of the MAC address table size limitation on a switch?

• VLAN hopping

• DHCP spoofing

• MAC flooding

• ARP poisoning

Which of the following helps prevent VLAN hopping attacks?

• Enable trunking on all ports

• Disable trunking on all access ports

• Use DHCP spoofing

• Enable CDP on all ports

What is the goal of a DHCP starvation attack?

• To steal user MAC addresses

• To create a DoS for clients trying to connect

• To secretly access another VLAN

• To send fake ARP replies

Which technique is used to mitigate ARP spoofing attacks?

• IP Source Guard

• DHCP Snooping

• Port Security

• Dynamic ARP Inspection (DAI)

How is a Spanning Tree Protocol (STP) attack executed?

• By sending fake VLAN tags

• By creating fake DHCP offers

• By sending BPDUs to become the root bridge

• By impersonating the DNS server

Why is it recommended to disable CDP on certain switch ports?

• It slows down the network

• CDP does not support non-Cisco devices

• CDP can be used for network reconnaissance

• CDP causes VLAN instability