SRWE Review Module 10-13

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• MAC flooding attack
• DHCP starvation attack

• DNS spoofing attack
• ARP poisoning attack

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• Implement a firewall to block all incoming traffic.
• Implement port security on switches to limit MAC address entries.
• Disable all MAC address learning on the switch.
• Increase the switch's bandwidth to handle more traffic.

Which is not one of the three Cisco products focus on endpoint security solutions?

• • Web Security Appliance

• • Email Security Appliance

• • NAC Appliance

• • Adaptive Security Appliance

True or False?
In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

• False
• True

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

• Remote authentication
• Two-factor authentication
• Biometric authentication
• Local authentication

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

• Enable discovery protocols only on necessary interfaces.
• Disable all discovery protocols entirely.
• Use discovery protocols only for non-critical devices.
• Enable discovery protocols on all interfaces.

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

• FTP (File Transfer Protocol)
• HTTP (Hypertext Transfer Protocol)
• RDP (Remote Desktop Protocol)
• SSH (Secure Shell)

Which statement describes the behavior of a switch when the MAC address table is full?

• The switch drops all incoming frames.
• The switch sends all frames to the CPU for processing.
• The switch learns new MAC addresses and updates the table.
• The switch floods unknown frames to all ports.

What device is considered a supplicant during the 802.1X authentication process?

• RADIUS server
• Access Point
• Supplicant
• Authenticator

Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals?

• SWA(config-if)# switchport port-security
  SWA(config-if)# switchport port-security mac-address sticky

• • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security violation restrict

• • SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security maximum 2

• • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky