1.2

Question 1

ACLs(Access Control Lists)

Answer 1

It’s the VIP list. Designed to explicitly permit certain IP address, IP ranges, or protocols. Implicitly denies the rest.

Question 2

Port Security

Answer 2

You can configure a switch so that it only learns one MAC address per port.

Question 3

802.1x (EAPOL)

Answer 3

Extensible Authentication Access Protocol over LAN

Allows only EAPOL traffic over port until client authenticates with a RADIUS or authentication server

Question 4

RBAC (Role Based Access Control)

Answer 4

Popular method of enabling access to a resource and is based on pre-defined policies set by an administrator

Question 5

Loop Protection

Answer 5

Layer 3 Routers implement Time to live (TTL). Each router hop decrements the TTL. Basically packets have a life span. If they don’t reach their destination they are dropped permanently.

Question 6

Log Analysis

Answer 6

Logs are generated by a number of devices:

Firewalls
Routers
Switches
IDS/IPS Systems

Question 7

RBAC (Role Based Access Control)

Answer 7

Popular method of enabling access to a resource and is based on pre-defined policies set by an administrator

Question 8

STP

Answer 8

Spanning Tree Protocol

For layer2 devices like switches. Different type of loop protection.