Font size
WorksheetsObject Oriented Programming
Total questions: 67
Worksheet time: 56mins
Which Layer 2 attack will result in legitimate users not getting valid IP addresses?
ARP spoofing
DHCP starvation
IP address spoofing
MAC address flooding
What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?
Disable DTP.
Disable STP.
Enable port security.
Place unused ports in an unused VLAN.
Which three Cisco products focus on endpoint security solutions? (Choose three.)
Web Security Appliance
Email Security Appliance
NAC Appliance
IPS Sensor Appliance
SSL/IPsec VPN Appliance
True or False? In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.
true
False
Which authentication method stores usernames and passwords in the router and is ideal for small networks?
local AAA
server-based AAA over TACACS+
server-based AAA
local AAA over TACACS+
local AAA over RADIUS
What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?
Enable CDP on edge devices, and enable LLDP on interior devices.
Use the open standard LLDP rather than CDP.
Use the default router settings for CDP and LLDP.
Disable both protocols on all interfaces where they are not required.
Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?
SNMP
TFTP
SSH
SCP
Which statement describes the behavior of a switch when the MAC address table is full?
It treats frames as unknown unicast and floods all incoming frames to all ports on the switch.
It treats frames as unknown unicast and floods all incoming frames to all ports across multiple switches.
It treats frames as unknown unicast and floods all incoming frames to all ports within the local VLAN.
It treats frames as unknown unicast and floods all incoming frames to all ports within the collision domain.
What device is considered a supplicant during the 802.1X authentication process?
the router that is serving as the default gateway
the authentication server that is performing client authentication
the client that is requesting authentication
the switch that is controlling network access
Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals? No one is allowed to disconnect the IP phone or the PC and connect some other wired device. If a different device is connected, port Fa0/2 is shut down. The switch should automatically detect the MAC address of the IP phone and the PC and add those addresses to the running configuration.
SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security violation restrict
SWA(config-if)# switchport port-security mac-address sticky
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security mac-address sticky
Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration?
Frames from PC1 will be dropped, and there will be no log of the violation.
Frames from PC1 will be forwarded to its destination, but a log entry will not be created.
Frames from PC1 will cause the interface to shut down immediately, and a log entry will be made.
Frames from PC1 will be forwarded since the switchport port-security violation command is missing.
Frames from PC1 will be forwarded to its destination, and a log entry will be created.
Which type of VLAN-hopping attack may be prevented by designating an unused VLAN as the native VLAN?
DHCP spoofing
DHCP starvation
VLAN double-tagging
DTP spoofing
A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac. What is the purpose of this configuration command?
It checks the source MAC address in the Ethernet header against the user-configured ARP ACLs.
It checks the source MAC address in the Ethernet header against the MAC address table.
It checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body.
It checks the source MAC address in the Ethernet header against the target MAC address in the ARP body.
Which two commands can be used to enable BPDU guard on a switch? (Choose two.)
S1(config)# spanning-tree bpduguard default
S1(config-if)# spanning-tree portfast bpduguard
S1(config)# spanning-tree portfast bpduguard default
S1(config-if)# enable spanning-tree bpduguard
S1(config-if)# spanning-tree bpduguard enable
As part of the new security policy, all switches on the network are configured to automatically learn MAC addresses for each port. All running configurations are saved at the start and close of every business day. A severe thunderstorm causes an extended power outage several hours after the close of business. When the switches are brought back online, the dynamically learned MAC addresses are retained. Which port security configuration enabled this?
auto secure MAC addresses
dynamic secure MAC addresses
static secure MAC addresses
sticky secure MAC addresses
Which type of management frame may regularly be broadcast by an AP?
authentication
probe request
probe response
Beacon
What are the two methods that are used by a wireless NIC to discover an AP? (Choose two.)
delivering a broadcast frame
receiving a broadcast beacon frame
initiating a three-way handshake
sending an ARP request
transmitting a probe request
A technician is configuring the channel on a wireless router to either 1, 6, or 11. What is the purpose of adjusting the channel?
to enable different 802.11 standards
to avoid interference from nearby wireless devices
to disable broadcasting of the SSID
to provide stronger security modes
When a guest speaker attempts to connect to the network, the laptop fails to display any available wireless networks. The access point must be operating in which mode?
mixed
passive
active
Open
To provide data rates up to 1.3 Gb/s and still be backward compatible with older devices, which wireless standard should be implemented?
802.11n
802.11ac
802.11g
802.11b
What is the first security measure the technician should apply immediately upon powering up the wireless router?
Enable MAC address filtering on the wireless router.
Configure encryption on the wireless router and the connected wireless devices.
Change the default user-name and password of the wireless router.
Disable the wireless network SSID broadcast.
On a Cisco 3504 WLC dashboard, which option provides access to the full menu of features?
Access Points
Network Summary
Advanced
Rogues
Which step is required before creating a new WLAN on a Cisco 3500 series WLC?
Create a new SSID.
Build or have an SNMP server available.
Build or have a RADIUS server available.
Create a new VLAN interface.
A network engineer is troubleshooting a newly deployed wireless network that is using the latest 802.11 standards. When users access high bandwidth services such as streaming video, the wireless network performance is poor. To improve performance the network engineer decides to configure a 5 Ghz frequency band SSID and train users to use that SSID for streaming media services. Why might configuring a 5 GHz frequency band SSID improve the wireless network performance for streaming media services?
Requiring the users to switch to the 5 GHz band for streaming media is inconvenient and will result in fewer users accessing these services.
The 5 GHz band has more channels and is less crowded than the 2.4 GHz band, which makes it more suited to streaming multimedia.
The 5 GHz band has a greater range and is therefore likely to be interference-free.
The only users that can switch to the 5 GHz band will be those with the latest wireless NICs, which will reduce usage.
A network administrator is configuring a RADIUS server connection on a Cisco 3500 series WLC. The configuration requires a shared secret password. What is the purpose for the shared secret password?
It is used by the RADIUS server to authenticate WLAN users.
It is used to authenticate and encrypt user data on the WLAN.
It is used to encrypt the messages between the WLC and the RADIUS server.
It allows users to authenticate and access the WLAN.
Which three parameters would need to be changed if best practices are being implemented for a home wireless AP? (Choose three.)
antenna frequency
wireless network password
wireless client operating system password
AP password
SSID
Which access control component, implementation, or protocol is based upon usernames and passwords?
802.1X
accounting
authentication
authorization
Which type of wireless network is based on the 802.11 standard and a 2.4-GHz or 5-GHz radio frequency?
wireless metropolitan-area network
wireless wide-area network
wireless local-area network
wireless personal-area network
Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)
DHCP Snooping
IP Source Guard
Dynamic ARP Inspection
Port Security
Web Security Appliance
What are three techniques for mitigating VLAN attacks? (Choose three.)
Use private VLANs.
Set the native VLAN to an unused VLAN.
Enable trunking manually.
Enable Source Guard.
Disable DTP.
Which feature on a Cisco router permits the forwarding of traffic for which there is no specific route?
next-hop
gateway of last resort
route source
outgoing interface
Which three advantages are provided by static routing? (Choose three.)
Configuration of static routes is error-free.
Static routing does not advertise over the network, thus providing better security.
Static routes scale well as the network grows.
Static routing typically uses less network bandwidth and fewer CPU operations than dynamic routing does.
The path a static route uses to send data is known.
What are two functions of dynamic routing protocols? (Choose two.)
to maintain routing tables
to assure low router overhead
to avoid exposing network information
to discover the network
to choose the path that is specified by the administrator
What is an advantage of using dynamic routing protocols instead of static routing?
easier to implement
more secure in controlling routing updates
fewer router resource overhead requirements
ability to actively search for new routes if the current path becomes unavailable
What happens to a static route entry in a routing table when the outgoing interface associated with that route goes into the down state?
The static route is removed from the routing table.
The router polls neighbors for a replacement route.
The router automatically redirects the static route to use another interface.
The static route remains in the table because it was defined as static.
What is a characteristic of a static route that matches all packets?
It uses a single network address to send multiple static routes to one destination address.
It identifies the gateway IP address to which the router sends all IP packets for which it does not have a learned or static route.
It backs up a route already discovered by a dynamic routing protocol.
It is configured with a higher administrative distance than the original dynamic routing protocol has.
When would it be more beneficial to use a dynamic routing protocol instead of static routing?
in an organization where routers suffer from performance issues
on a stub network that has a single exit point
in an organization with a smaller network that is not expected to grow in size
on a network where there is a lot of topology changes
Which route would be used to forward a packet with a source IP address of 192.168.10.1 and a destination IP address of 10.1.1.1?
C 192.168.10.0/30 is directly connected, GigabitEthernet0/1
O 10.1.1.0/24 [110/65] via 192.168.200.2, 00:01:20, Serial0/1/0
S* 0.0.0.0/0 [1/0] via 172.16.1.1
S 10.1.0.0/16 is directly connected, GigabitEthernet0/0
Refer to the exhibit. What is the administrative distance value of the route for router R1 to reach the destination IPv6 address of 2001:DB8:CAFE:4::A?
120
110
1
4
Which value in a routing table represents trustworthiness and is used by the router to determine which route to install into the routing table when there are multiple routes toward the same destination?
administrative distance
metric
outgoing interface
routing protocol
Refer to the graphic. Which command would be used on router A to configure a static route to direct traffic from LAN A that is destined for LAN C?
A(config)# ip route 192.168.3.0 255.255.255.0 192.168.3.1
A(config)# ip route 192.168.3.2 255.255.255.0 192.168.4.0
A(config)# ip route 192.168.4.0 255.255.255.0 192.168.5.2
A(config)# ip route 192.168.5.0 255.255.255.0 192.168.3.2
A(config)# ip route 192.168.4.0 255.255.255.0 192.168.3.2
On which two routers would a default static route be configured? (Choose two.)
any router where a backup route to dynamic routing is needed for reliability
the router that serves as the gateway of last resort
any router running an IOS prior to 12.0
stub router connection to the rest of the corporate or campus network
edge router connection to the ISP
Refer to the exhibit. This network has two connections to the ISP, one via router C and one via router B. The serial link between router A and router C supports EIGRP and is the primary link to the Internet. If the primary link fails, the administrator needs a floating static route that avoids recursive route lookups and any potential next-hop issues caused by the multiaccess nature of the Ethernet segment with router B. What should the administrator configure?
Create a static route pointing to 10.1.1.1 with an AD of 95.
Create a fully specified static route pointing to Fa0/0 with an AD of 1.
Create a fully specified static route pointing to Fa0/0 with an AD of 95.
Create a static route pointing to 10.1.1.1 with an AD of 1.
Create a static route pointing to Fa0/0 with an AD of 1.
What is a characteristic of a floating static route?
When it is configured, it creates a gateway of last resort.
It is used to provide load balancing between static routes.
It is simply a static route with 0.0.0.0/0 as the destination IPv4 address.
It is configured with a higher administrative distance than the original dynamic routing protocol has.
What network prefix and prefix-length combination is used to create a default static route that will match any IPv6 destination?
FFFF::/128
::1/64
::/128
::/0
Consider the following command:
ip route 192.168.10.0 255.255.255.0 10.10.10.2 5
What does the 5 at the end of the command signify?
exit interface
maximum number of hops to the 192.168.10.0/24 network
metric
administrative distance
Refer to the exhibit. The routing table for R2 is as follows:
Gateway of last resort is not set
10.0.0.0/30 is subnetted, 2 subnets
C 10.0.0.0 is directly connected, Serial0/0/0
C 10.0.0.4 is directly connected, Serial0/0/1
192.168.10.0/26 is subnetted, 3 subnets
S 192.168.10.0 is directly connected, Serial0/0/0
C 192.168.10.64 is directly connected, FastEthernet0/0
S 192.168.10.128 [1/0] via 10.0.0.6
What will router R2 do with a packet destined for 192.168.10.129?
send the packet out interface FastEthernet0/0
send the packet out interface Serial0/0/1
drop the packet
send the packet out interface Serial0/0/0
An administrator issues the ipv6 route 2001:db8:acad:1::/32 gigabitethernet0/0 2001:db8:acad:6::1 100 command on a router. What administrative distance is assigned to this route?
0
1
32
100
Refer to the exhibit. Which default static route command would allow R1 to potentially reach all unknown networks on the Internet?
R1(config)# ipv6 route 2001:db8:32::/64 G0/0
R1(config)# ipv6 route ::/0 G0/0 fe80::2
R1(config)# ipv6 route 2001:db8:32::/64 G0/1 fe80::2
R1(config)# ipv6 route ::/0 G0/1 fe80::2
Refer to the exhibit. The network engineer for the company that is shown wants to use the primary ISP connection for all external connectivity. The backup ISP connection is used only if the primary ISP connection fails. Which set of commands would accomplish this goal?
ip route 0.0.0.0 0.0.0.0 s0/0/0
ip route 0.0.0.0 0.0.0.0 s0/1/0
ip route 0.0.0.0 0.0.0.0 s0/0/0
ip route 0.0.0.0 0.0.0.0 s0/1/0 10
ip route 198.133.219.24 255.255.255.252
ip route 64.100.210.80 255.255.255.252 10
ip route 198.133.219.24 255.255.255.252
ip route 64.100.210.80 255.255.255.252
What command to use to check if your switch is acting as a root bridge?
show stp
show spanning-tree
show stp summary
show spanning-tree bridge
What type of WLAN configuration is commonly referred as ad hoc mode?
Independent Basic Service Set (IBSS)
Extended Service Set (ESS)
Mesh mode
Infrastructure mode
While observing networking traffic, you see several DHCP Discover messages. What destination address for these messages?
00-00-00-00-00-00
FF-FF-FF-FF-FF-FF
0F-1B-3C-2F-3C-2A
192.168.4.5
Which of the following accurately describes how routers and switches operate?
Routers drop packets with unknown destination
Routers flood packets with unknown destination
Switch drop frames with unknown destination
Switch flood frames with unknown destination
In a wireless network infrastructure mode, what device coordinates client communciation?
Switch
Router
Bridge
Access Point
Which type of memory is used by Cisco routers to store the routing table?
Flash
NVRAM
ROM
RAM
Which DHCP message can be delivered using unicast communication?
DHCP request
DHCP offer
DHCP discover
DHCP ACK
Which access control method or protocol relies on usernames and passwords for authentication?
authorization
802.1X
accounting
authentication
WHAT IS THE MAXIMUM THEORETICAL DATA RATE SUPPORTED BY 802.11AC?
54 Mbps
300 Mbps
7 Gbps
1.3 Gbps
How can IT admins ensure that wireless devices are assigned IP addresses automatically?
VPN Server
FTP Server
DNS Server
DHCP Server
WHAT PROTOCOL PROVIDES SECURE AUTHETICATION AND ENCRYPTION FOR ENTERPRISE WIRELESS NETWORKS?
SMTP
SNMP
HTTP
RADIUS
Which type of WLAN frame is responsible for handling associations and authentications?
Control frames
Data frames
Beacon frames
Management frames
What IEEE standard is responsible for defining WLAN technology?
IEEE 802.3
IEEE 802.16
IEEE 802.15
IEEE 802.11
In the AAA framework, which component decides the level of access a user is granted?
Authorization
Authentication
Accounting
Administration
An office network is secured with WPA2-personal, but there are some concerns about potential unauthorized access -- what might be the issue?
Switch to WPA2-enterprise with RADIUS server
Disable SSID broadcasting
Use WEP encryption
Use open network without a password
What channel width is typically used by the 802.11ac standard in the 5GHz band?
160 MHz
20 MHz
40 MHz
80 MHz
What frequency band is commonly used by both 802.11b and 802.11g standards?
3.6 GHz
2.4 GHz
900 MHz
5 GHz
