CCNA - SRWE - 10.6.2

What two protocols are supported on Cisco devices for AAA communications? (Choose two.)

• VTP

• HSRP

• TACACS+

• LLDP

• RADIUS

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

• LLDP

• FTP

• CDP

• HTTP

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?​

• Layer 4

• Layer 3

• Layer 2

• Layer 7

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

• Spanning Tree Protocol manipulation

• MAC address overflow

• IP address spoofing

• ARP poisoning

Why is authentication with AAA preferred over a local database method?

• It uses less network bandwidth

• It provides a fallback authentication method if the administrator forgets the username or password.

• it requires a login and password combination on the console, vty lines, and aux ports.

• It specifies a different password for each line or port.

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server? 

• RADIUS

• 802.1x

• SSH

• TACACS

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

• Port Security

• IP Source Guard

• Dynamic ARP Inspection

• DHCP Snooping

What is the purpose of AAA accounting?  

• to determine which operations the user can perform

• to collect and report application usage

• to determine which resources the user can access

• to prove users are who they say they are.

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• DHCP starvation

• ARP spoofing

• MAC address flooding

• IP address spoofing

Which three Cisco products focus on endpoint security solutions? (Choose three.)

• SSL/IPsec VPN Appliance

• Web Security Appliance

• NAC Appliance

• Adaptive Security Appliance

• Email Security Appliance