wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

Cisco_Sem2_Mod11

Total questions: 16

Worksheet time: 8mins

Name
Class
Date
1.

One million Americans spend an average of 17 days a year doing this?

a)

Surfing

b)

Swimming

c)

Fishing

d)

Sailing

2.

True or False, A simple method that many administrators use to help secure the network from unauthorized access is to enable all unused ports on a switch

a)

True

b)

False

3.

True or False, The simplest and most effective method to prevent MAC address table overflow attacks is to disable port security

a)

True

b)

False

4.

True or False, Port security is enabled with the switchport port-security interface configuration command

a)

True

b)

False

5.

True or False, If an active port is configured with the switchport port-security command and more than one device is connected to that port, the port will transition to the error-disabled state

a)

True

b)

False

6.

The switch can be configured to learn about MAC addresses on a secure port in one of three ways, select ALL three

a)

Manually Configured

b)

Dynamically Learned

c)

Dynamically Learned – Sticky

d)

Dynamically Configured

7.

True or False, when introducing a rogue switch and enabling trunking. An attacker can then access all the VLANs on the victim switch from the rogue switch

a)

True

b)

False

8.

True or False, The goal of a DHCP starvation attack is to create a Denial of Service (DoS) for connecting clients

a)

True

b)

False

9.

True or False, DHCP snooping filters DHCP messages and rate-limits DHCP traffic on untrusted ports

a)

True

b)

False

10.

True or False, In a typical ARP attack, a threat actor can send unsolicited ARP replies to other hosts on the subnet with the MAC Address of the threat actor and the IP address of the default gateway

a)

True

b)

False

11.

To mitigate the chances of ARP spoofing and ARP poisoning, select All of the mitigation techniques

a)

Enable DHCP snooping globally

b)

Enable DHCP snooping on selected VLANs

c)

Enable DAI on selected VLANs

d)

Configure trusted interfaces for DHCP snooping and ARP inspection

12.

True or False, Dynamic Arp Inspection (DAI) can also be configured to check for both destination or source MAC and IP addresses

a)

True

b)

False

13.

True or False, The ip arp inspection validate {[src-mac] [dst-mac] [ip]} global configuration command is used to configure DAI to drop ARP packets when the IP addresses are invalid

a)

True

b)

False

14.

True or False, To prevent ARP spoofing and the resulting ARP poisoning, a switch must ensure that only invalid ARP Requests and Replies are relayed

a)

True

b)

False

15.

True or False, To mitigate STP attacks, use PortFast and Bridge Protocol Data Unit (BPDU) Guard

a)

True

b)

False

16.

Which Pokemon is the first Pokemon in the Pokedex

a)

Rhydon

b)

Bulbasaur

c)

Slowbro

d)

Pikachu