Chapter 10 - Threat Control Strategy

Question 1

What is the biggest security vulnerability to networks today?

Answer 1

end users and administrators

How to mitigate:

• user training
• signed user agreements
• clear company policies

Question 2

How does “storm control” work on a switch?

Answer 2

This feature allows a switch to start “clamping” down on traffic at configurable levels. If broacast traffic is consuming more than 50% CPU resources, it can then be stopped or rate limited.

Question 3

True or False: A router can be used as a site-to-site VPN endpoint?

Answer 3

True.

IOS supports remote-access VPNs using SSL or IPSec in addition to being able to act as a site-to-site IPSec VPN endpoint.

Question 4

What does Cisco SIO stand for?

Answer 4

SIO is “Security Intelligence Operations”.

SIO researches and analyzes threats and prvoides realtime updates and best practices related to these threats. They deliver breaking news as it happens.