CN2-Chapter1-4

Which attack encrypts the data on hosts in an attempt to extract a monetary payment from the victim?

• DDoS
• Data Breach
• Malware
• Ransomware

Which AAA component is responsible for collecting and reporting usage data for auditing and billing purposes?

• Authentication
• Authorization
• Accounting
• Client

Which of the following mitigation techniques prevents DHCP starvation and DHCP spoofing attacks?

• IPSG
• DHCP Snooping
• DAI
• Port Security

What mitigation technique must be implemented to prevent MAC address overflow attacks?

• IPSG
• DAI
• Port Security
• DHCP Snooping

A threat actor sends a BPDU message with priority 0. What type of attack is this?

• STP Attack
• DHCP Starvation
• ARP Spoofing
• Address Spoofing

Where are dynamically learned MAC addresses stored when sticky learning is enabled with the switchport port-security mac-address sticky command?

• ROM
• RAM
• NVRAM
• Flash

Which command would be best to use on an unused switch port if a company adheres to the best practices as recommended by Cisco?

• Shutdown
• IP DHCP Snooping
• Switchport
• Port-Security

What is a recommended best practice when dealing with the native VLAN?

• Turn off DTP
• Use Port Security
• Assign to Unused VLAN
• Assign to Management VLAN

What Layer 2 attack is mitigated by disabling Dynamic Trunking Protocol?

• VLAN Hopping
• DHCP Spoofing
• ARP Poisoning
• ARP Spoofing

A network administrator is configuring DHCP snooping on a switch. Which configuration command should be used first?

• IP DHCP Snooping
• IP DHCP Snooping VLAN
• IP DHCP Snooping Trust
• IP DHCP Snooping Limit Rate