Font size
WorksheetsCisco_Sem2_Mod11
Total questions: 16
Worksheet time: 8mins
One million Americans spend an average of 17 days a year doing this?
Surfing
Swimming
Fishing
Sailing
True or False, A simple method that many administrators use to help secure the network from unauthorized access is to enable all unused ports on a switch
True
False
True or False, The simplest and most effective method to prevent MAC address table overflow attacks is to disable port security
True
False
True or False, Port security is enabled with the switchport port-security interface configuration command
True
False
True or False, If an active port is configured with the switchport port-security command and more than one device is connected to that port, the port will transition to the error-disabled state
True
False
The switch can be configured to learn about MAC addresses on a secure port in one of three ways, select ALL three
Manually Configured
Dynamically Learned
Dynamically Learned – Sticky
Dynamically Configured
True or False, when introducing a rogue switch and enabling trunking. An attacker can then access all the VLANs on the victim switch from the rogue switch
True
False
True or False, The goal of a DHCP starvation attack is to create a Denial of Service (DoS) for connecting clients
True
False
True or False, DHCP snooping filters DHCP messages and rate-limits DHCP traffic on untrusted ports
True
False
True or False, In a typical ARP attack, a threat actor can send unsolicited ARP replies to other hosts on the subnet with the MAC Address of the threat actor and the IP address of the default gateway
True
False
To mitigate the chances of ARP spoofing and ARP poisoning, select All of the mitigation techniques
Enable DHCP snooping globally
Enable DHCP snooping on selected VLANs
Enable DAI on selected VLANs
Configure trusted interfaces for DHCP snooping and ARP inspection
True or False, Dynamic Arp Inspection (DAI) can also be configured to check for both destination or source MAC and IP addresses
True
False
True or False, The ip arp inspection validate {[src-mac] [dst-mac] [ip]} global configuration command is used to configure DAI to drop ARP packets when the IP addresses are invalid
True
False
True or False, To prevent ARP spoofing and the resulting ARP poisoning, a switch must ensure that only invalid ARP Requests and Replies are relayed
True
False
True or False, To mitigate STP attacks, use PortFast and Bridge Protocol Data Unit (BPDU) Guard
True
False
Which Pokemon is the first Pokemon in the Pokedex
Rhydon
Bulbasaur
Slowbro
Pikachu
