10-13 2S\

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

• ARP spoofing

• DHCP starvation

• IP address spoofing

• MAC address flooding

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

• Disable DTP

• Disable STP

• Enable port security

• Place unused ports in an unused VLAN

Which three Cisco products focus on endpoint security solutions?

• SSL/IPsec VPN Appliance

• IPS Sensor Appliance

• Web Security Appliance

• Email Security Appliance

• NAC Appliance

In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

• true

• false

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

• local AAA over TACACS+

• local AAA

• local AAA over RADIUS

• server-based AAA

• server-based AAA over TACACS+

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

• Enable CDP on edge devices, and enable LLDP on interior devices.

• Use the open standard LLDP rather than CDP.

• Use the default router settings for CDP and LLDP.

• Disable both protocols on all interfaces where they are not required.

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

• SNMP

• TFTP

• SSH

• SCP

Which statement describes the behavior of a switch when the MAC address table is full?

• It treats frames as unknown unicast and floods all incoming frames to all ports on the switch.

• It treats frames as unknown unicast and floods all incoming frames to all ports across multiple switches.

• It treats frames as unknown unicast and floods all incoming frames to all ports within the local VLAN.

• It treats frames as unknown unicast and floods all incoming frames to all ports within the collision domain.

What device is considered a supplicant during the 802.1X authentication process?

• the router that is serving as the default gateway

• the authentication server that is performing client authentication

• the client that is requesting authentication

• the switch that is controlling network access

Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has specific security goals?

• • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security mac-address sticky

• • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security violation restrict

• • SWA(config-if)# switchport port-security mac-address sticky
    SWA(config-if)# switchport port-security maximum 2

• • SWA(config-if)# switchport port-security
    SWA(config-if)# switchport port-security maximum 2
    SWA(config-if)# switchport port-security mac-address sticky