What is a Distributed Denial of Service (DDoS) attack?

Various network security devices are required to protect the network perimeter from outside access, select All of the devices

True or False, endpoints are particularly susceptible to malware-related attacks that originate through email or web browsing. ​

What does SMTP stand for?

True or False, the Cisco Web Security Appliance (WSA) is a mitigation technology for web-based threats

AAA stands for?

True or False, AAA is a way to control who is permitted to access a network (authenticate), what they can do while they are there (authorize), and to audit what actions they performed while accessing the network (accounting)

Select the TWO common methods of implementing AAA authentication

True or False, a primary use of accounting is to combine it with AAA authentication

This protocol restricts unauthorized workstations from connecting to a LAN through publicly accessible switch ports

Select ALL the Switch Attack Categories

Select ALL the Switch Attack Mitigation Techniques

True or False, A VLAN hopping attack enables traffic from one VLAN to be seen by another VLAN without the aid of a router

Select ALL the VLAN Attack Mitigation techniques

What do DHCP servers dynamically provide?, select ALL correct options

True or False, a DHCP Starvation Attack occurs when a rogue DHCP server is connected to the network and provides false IP configuration parameters to legitimate clients. A rogue server can provide a variety of misleading information

True or False, IP address spoofing is when a threat actor hijacks a valid IP address of another device on the subnet or uses a random IP address

True or False, Cisco Discovery Protocol (CDP) information is sent out CDP-enabled ports in periodic, unencrypted, unauthenticated broadcasts. CDP information includes the IP address of the device, IOS software version, platform, capabilities, and the native VLAN

True or False, the first hard disk of 1 GB capacity was developed in 1980. It weighed 249kg and its cost was $40,000 at that time

True or False, A simple method that many administrators use to help secure the network from unauthorized access is to enable all unused ports on a switch

True or False, The simplest and most effective method to prevent MAC address table overflow attacks is to disable port security

True or False, Port security is enabled with the switchport port-security interface configuration command

True or False, If an active port is configured with the switchport port-security command and more than one device is connected to that port, the port will transition to the error-disabled state

A switch can be configured to learn about MAC addresses on a secure port in one of three ways, select ALL three

True or False, when introducing a rogue switch and enabling trunking. An attacker can then access all the VLANs on the victim switch from the rogue switch

True or False, The goal of a DHCP starvation attack is to create a Denial of Service (DoS) for connecting clients

True or False, In a typical ARP attack, a threat actor can send unsolicited ARP replies to other hosts on the subnet with the MAC Address of the threat actor and the IP address of the default gateway

To mitigate the chances of ARP spoofing and ARP poisoning, select All of the mitigation techniques

True or False, Dynamic Arp Inspection (DAI) can also be configured to check for both destination or source MAC and IP addresses

True or False, To prevent ARP spoofing and the resulting ARP poisoning, a switch must ensure that only invalid ARP Requests and Replies are relayed

True or False, To mitigate STP attacks, use PortFast and Bridge Protocol Data Unit (BPDU) Guard

One million Americans spend an average of 17 days a year doing this?