Network Security Quiz

A network administrator has found a user sending a double-tagged 802.1Q frame to a switch. What is the best solution to prevent this type of attack?

• The native VLAN number used on any trunk should be one of the active data VLANs.

• The VLANs for user access ports should be different VLANs than any native VLANs used on trunk ports.

• Trunk ports should be configured with port security.

• Trunk ports should use the default VLAN as the native VLAN number.

Refer to the exhibit. Which two conclusions can be drawn from the output? (Choose two.)

• The EtherChannel is down.

• The port channel ID is 2.

• The port channel is a Layer 3 channel.

• The bundle is fully operational.

On a Cisco 3504 WLC Summary page (Advanced > Summary), which tab allows a network administrator to configure a particular WLAN with a WPA2 policy?

• WLANs

• SECURITY

• WIRELESS

• CONFIGURATION

Refer to the exhibit. A network engineer is configuring IPv6 routing on the network. Which command issued on router HQ will configure a default route to the Internet to forward packets to an IPv6 destination network that is not listed in the routing table?

• ipv6 route ::/0 serial 0/0/0

• ip route 0.0.0.0 0.0.0.0 serial 0/1/1

• ipv6 route ::1/0 serial 0/1/1

• ipv6 route ::/0 serial 0/1/1

Users are complaining of sporadic access to the internet every afternoon. What should be done or checked?

• Create static routes to all internal networks and a default route to the internet.

• Verify that there is not a default route in any of the edge router routing tables.

• Create a floating static route to that network.

• Check the statistics on the default route for oversaturation.

What action takes place when the source MAC address of a frame entering a switch appears in the MAC address table associated with a different port?

• The switch replaces the old entry and uses the more current port.

• The switch purges the entire MAC address table.

• The switch updates the refresh timer for the entry.

• The switch forwards the frame out of the specified port.

A network administrator is configuring a WLAN. Why would the administrator use a WLAN controller?

• To centralize management of multiple WLANs.

• To provide privacy and integrity to wireless traffic by using encryption.

• To facilitate group configuration and management of multiple WLANs through a WLC.

• To provide prioritized service for time-sensitive applications.

Which three statements accurately describe duplex and speed settings on Cisco 2960 switches?

• An autonegotiation failure can result in connectivity issues.

• When the speed is set to 1000 Mb/s, the switch ports will operate in full-duplex mode.

• The duplex and speed settings of each switch port can be manually configured.

• By default, the speed is set to 100 Mb/s and the duplex mode is set to autonegotiation.

Refer to the exhibit. A network administrator configures R1 for inter-VLAN routing between VLAN 10 and VLAN 20. However, the devices in VLAN 10 and VLAN 20 cannot communicate. Based on the configuration in the exhibit, what is a possible cause for the problem?

• The encapsulation is correctly configured.

• The encapsulation is misconfigured on a subinterface.

• The encapsulation command is missing entirely.

• The encapsulation is configured on the wrong interface.

A network administrator uses the spanning-tree portfast bpduguard default global configuration command to enable BPDU guard on a switch. However, BPDU guard is not activated on all access ports. What is the cause of the issue?

• BPDU guard needs to be activated in the interface configuration command mode.

• Access ports configured with root guard cannot be configured with BPDU guard.

• Access ports belong to different VLANs.

• PortFast is not configured on all access ports.