Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

geci > 10-13 > Flashcards

10-13 Flashcards

1
Q

Which authentication method stores usernames and passwords in the router and is ideal for small networks?

A

local AAA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are two protocols that are used by AAA to authenticate users against a central database of usernames and password? (Choose two.)

A
  • TACACS+
  • RADIUS
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the result of a DHCP starvation attack?

A

Legitimate clients are unable to lease IP addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices?

A

Disable both protocols on all interfaces where they are not required.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices?

A

SSH

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which statement describes the behavior of a switch when the MAC address table is full?

A

It treats frames as unknown unicast and floods all incoming frames to all ports within the local VLAN.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which feature on a switch makes it vulnerable to VLAN hopping attacks?

A

the automatic trunking port feature enabled for all ports by default

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which feature or configuration on a switch makes it vulnerable to VLAN double-tagging attacks?

A

the native VLAN of the trunking port being the same as a user VLAN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which component of AAA is used to determine which resources a user can access and which operations the user is allowed to perform?

A

authorization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which component of AAA allows an administrator to track individuals who access network resources and any changes that are made to those resources?

A

accounting

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What device is considered a supplicant during the 802.1X authentication process?

A

the client that is requesting authentication

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Refer to the exhibit. The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown?

A

The MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Refer to the exhibit. Port Fa0/2 has already been configured appropriately. The IP phone and PC work properly. Which switch configuration would be most appropriate for port Fa0/2 if the network administrator has the following goals?
No one is allowed to disconnect the IP phone or the PC and connect some other wired device.
If a different device is connected, port Fa0/2 is shut down.
The switch should automatically detect the MAC address of the IP phone and the PC and add those addresses to the running configuration.

A

SWA(config-if)# switchport port-security
SWA(config-if)# switchport port-security maximum 2
SWA(config-if)# switchport port-security mac-address sticky

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration?

A

Frames from PC1 will cause the interface to shut down immediately, and a log entry will be made.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A network administrator is configuring port security on a Cisco switch. The company security policy specifies that when a violation occurs, packets with unknown source addresses should be dropped and no notification should be sent. Which violation mode should be configured on the interfaces?

A

protect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces?

A

preventing rogue switches from being added to the network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which type of VLAN-hopping attack may be prevented by designating an unused VLAN as the native VLAN?

A

VLAN double-tagging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Refer to the exhibit. PC1 and PC2 should be able to obtain IP address assignments from the DHCP server. How many ports among switches should be assigned as trusted ports as part of the DHCP snooping configuration?

A

7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

An IT security specialist enables port security on a switch port of a Cisco switch. What is the default violation mode in use until the switch port is configured to use a different violation mode?

A

shutdown

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A network administrator enters the following commands on the switch SW1.
SW1(config)# interface range fa0/5 – 10
SW1(config-if)# ip dhcp snooping limit rate 6
What is the effect after these commands are entered?

A

FastEthernet ports 5 through 10 can receive up to 6 DHCP discovery messages per second.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac . What is the purpose of this configuration command?

A

It checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which two commands can be used to enable BPDU guard on a switch? (Choose two.)

A
  • S1(config-if)# spanning-tree bpduguard enable
  • S1(config)# spanning-tree portfast bpduguard default
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

As part of the new security policy, all switches on the network are configured to automatically learn MAC addresses for each port. All running configurations are saved at the start and close of every business day. A severe thunderstorm causes an extended power outage several hours after the close of business. When the switches are brought back online, the dynamically learned MAC addresses are retained. Which port security configuration enabled this?

A

sticky secure MAC addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which type of management frame may regularly be broadcast by an AP?

A

beacon

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What type of wireless antenna is best suited for providing coverage in large open spaces, such as hallways or large conference rooms?

A

omnidirectional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is an advantage of SSID cloaking?​

A

Clients will have to manually identify the SSID to connect to the network.​

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What are the two methods that are used by a wireless NIC to discover an AP? (Choose two.)

A
  • transmitting a probe request
  • receiving a broadcast beacon frame
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which wireless network topology would be used by network engineers to provide a wireless network for an entire college building?

A

infrastructure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What is a wireless security mode that requires a RADIUS server to authenticate wireless users?

A

enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What two IEEE 802.11 wireless standards operate only in the 5 GHz range? (Choose two.)

A

802.11a ac

31
Q

A technician is configuring the channel on a wireless router to either 1, 6, or 11. What is the purpose of adjusting the channel?

A

to avoid interference from nearby wireless devices

32
Q

While attending a conference, participants are using laptops for network connectivity. When a guest speaker attempts to connect to the network, the laptop fails to display any available wireless networks. The access point must be operating in which mode?

A

active

33
Q

A network administrator is required to upgrade wireless access to end users in a building. To provide data rates up to 1.3 Gb/s and still be backward compatible with older devices, which wireless standard should be implemented?

A

802.11ac

34
Q

A company has recently implemented an 802.11n wireless network. Some users are complaining that the wireless network is too slow. Which solution is the best method to enhance the performance of the wireless network?

A

Split the traffic between the 2.4 GHz and 5 GHz frequency bands.

35
Q

A technician is about to install and configure a wireless network at a small branch office. What is the first security measure the technician should apply immediately upon powering up the wireless router?

A

Change the default user-name and password of the wireless router.

36
Q

On a Cisco 3504 WLC dashboard, which option provides access to the full menu of features?

A

Advanced

37
Q

On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to access and configure a WLAN for a specific security option such as WPA2?

A

WLANs

38
Q

Which protocol can be used to monitor the network?

A

SNMP

39
Q

A network administrator deploys a wireless router in a small law firm. Employee laptops join the WLAN and receive IP addresses in the 10.0.10.0/24 network. Which service is used on the wireless router to allow the employee laptops to access the internet?

A

NAT

40
Q

Which service can be used on a wireless router to prioritize network traffic among different types of applications so that voice and video data are prioritized over email and web data?

A

QoS

41
Q

Which step is required before creating a new WLAN on a Cisco 3500 series WLC?

A

Create a new VLAN interface.

42
Q

A network engineer is troubleshooting a newly deployed wireless network that is using the latest 802.11 standards. When users access high bandwidth services such as streaming video, the wireless network performance is poor. To improve performance the network engineer decides to configure a 5 Ghz frequency band SSID and train users to use that SSID for streaming media services. Why might this solution improve the wireless network performance for that type of service?

A

The 5 GHz band has more channels and is less crowded than the 2.4 GHz band, which makes it more suited to streaming multimedia.

43
Q

A network administrator is working to improve WLAN performance on a dual-band wireless router. What is a simple way to achieve a split-the-traffic result?

A

Make sure that different SSIDs are used for the 2.4 GHz and 5 GHz bands.

44
Q

A network administrator is configuring a RADIUS server connection on a Cisco 3500 series WLC. The configuration requires a shared secret password. What is the purpose for the shared secret password?

A

It is used to encrypt the messages between the WLC and the RADIUS server.

45
Q

A laptop cannot connect to a wireless access point. Which two troubleshooting steps should be taken first? (Choose two.)

A
  • Ensure that the wireless NIC is enabled.
  • Ensure that the wireless SSID is chosen.
46
Q

Which three parameters would need to be changed if best practices are being implemented for a home wireless AP? (Choose three.)

A
  • SSID
  • AP password
  • wireless network password
47
Q

Which access control component, implementation, or protocol controls what users can do on the network?

A

authorization

48
Q

Which access control component, implementation, or protocol is implemented either locally or as a server-based solution?

A

authentication

49
Q

Which access control component, implementation, or protocol audits what users actions are performed on the network?

A

accounting

50
Q

Which access control component, implementation, or protocol restricts LAN access through publicly accessible switch ports?

A

802.1X

51
Q

Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user?

A

accounting

52
Q

Which access control component, implementation, or protocol controls who is permitted to access a network?

A

authentication

53
Q

Which access control component, implementation, or protocol collects and reports usage data?

A

accounting

54
Q

Which access control component, implementation, or protocol indicates success or failure of a client-requested service with a PASS or FAIL message?

A

authorization

55
Q

Which access control component, implementation, or protocol is based on device roles of supplicant, authenticator, and authentication server?

A

802.1X

56
Q

Which access control component, implementation, or protocol is based upon usernames and passwords?

A

authentication

57
Q

Which type of wireless network uses transmitters to provide coverage over an extensive geographic area?

A

wireless wide-area network

58
Q

Which type of wireless network commonly uses Bluetooth or ZigBee devices?

A

wireless personal-area network

59
Q

Which type of wireless network uses transmitters to provide wireless service over a large urban region?

A

wireless metropolitan-area network

60
Q

Which type of wireless network is suitable for use in a home or office?

A

wireless local-area network

61
Q

Which type of wireless network often makes use of devices mounted on buildings?

A

wireless metropolitan-area network

62
Q

Which type of wireless network is suitable for national and global communications?

A

wireless wide-area network

63
Q

Which type of wireless network uses transmitters to cover a medium-sized network, usually up to 300 feet (91.4 meters)?

A

wireless local-area network

64
Q

Which type of wireless network is based on the 802.11 standard and a 2.4-GHz or 5-GHz radio frequency?

A

wireless local-area network

65
Q

Which type of wireless network is suitable for providing wireless access to a city or district?

A

wireless metropolitan-area network

66
Q

Which type of wireless network uses low powered transmitters for a short-range network, usually 20 to 30 ft. (6 to 9 meters)?

A

wireless personal-area network

67
Q

Which two Cisco solutions help prevent DHCP starvation attacks? (Choose two.)

A
  • Port Security
  • DHCP Snooping
68
Q

What are three techniques for mitigating VLAN attacks? (Choose three.)

A
  • Disable DTP.
  • Enable trunking manually.
  • Set the native VLAN to an unused VLAN.
69
Q

Refer to the exhibit. What can be determined about port security from the information that is shown?

A

The port violation mode is the default for any port that has port security enabled.

70
Q

A network administrator of a college is configuring the WLAN user authentication process. Wireless users are required to enter username and password credentials that will be verified by a server. Which server would provide such service?

A

RADIUS

71
Q

A technician is troubleshooting a slow WLAN that consists of 802.11b and 802.11g devices . A new 802.11n/ac dual-band router has been deployed on the network to replace the old 802.11g router. What can the technician do to address the slow wireless speed?

A

Split the wireless traffic between the 802.11n 2.4 GHz band and the 5 GHz band.

72
Q

The company handbook states that employees cannot have microwave ovens in their offices. Instead, all employees must use the microwave ovens located in the employee cafeteria. What wireless security risk is the company trying to avoid?

A

accidental interference

73
Q

What is the function provided by CAPWAP protocol in a corporate wireless network?

A

CAPWAP provides the encapsulation and forwarding of wireless user traffic between an access point and a wireless LAN controller.

74
Q

Which event will take place if there is a port security violation on switch S1 interface Fa0/1?

A

Packets with unknown source addresses will be dropped.

geci (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions