Documente Academic
Documente Profesional
Documente Cultură
An SDEE alert is generated, and the switch resets the interface when an invalid MAC address is detected.
An STP multicast notification packet is forwarded to all switches any time a change in the network topology is detected.
A port violation occurs when a MAC address outside of the range of allowed addresses transmits traffic over a secure port.
An SNMP trap is sent to the network management system whenever a new MAC address is added to or an old address is deleted from the
forwarding tables.
2 Which Cisco endpoint security product helps maintain network stability by providing posture assessment, quarantining of noncompliant systems,
remediation of noncompliant systems?
Cisco Access Control Server
3 Which two measures are recommended to mitigate VLAN hopping attacks? (Choose two.)
Use a dedicated native VLAN for all trunk ports.
4 Which two elements are part of the Cisco strategy for addressing endpoint security? (Choose two.)
policy compliance using products such as Cisco NAC
SATA
iSCSI
IP PBX
FCIP
IDE
6 Which attack relies on the default automatic trunking configuration on most Cisco switches?
LAN storm attack
7 If a switch is configured with the storm-control command and the action shutdown and action trap parameters, which two actions does the sw
when a storm occurs on a port? (Choose two.)
The port is disabled.
8 Which software tool can a hacker use to flood the MAC address table of a switch?
macof
Cisco SDM
protocol analyzer
9 Which technology is used to protect the switched infrastructure from problems caused by receiving BPDUs on ports that should not be receivin
RSPAN
PortFast
Root guard
Loop guard
BPDU guard
10 When configuring a switch port for port security, what is the default violation mode?
protect
reset
restrict
shutdown
11 Which three statements are true regarding SPAN and RSPAN? (Choose three.)
SPAN can send a copy of traffic to a port on another switch.
SPAN can be configured to send a copy of traffic to a destination port on the same switch.
SPAN can copy traffic on a source port or source VLAN to a destination port on the same switch.
RSPAN is required to copy traffic on a source VLAN to a destination port on the same switch.
RSPAN can be used to forward traffic to reach an IDS that is analyzing traffic for malicious behavior.
It acts like a loopback interface in that it reflects the captured traffic to the RSPAN VLAN.
It allows an IDS device to direct malicious traffic to it, isolating that traffic from other areas of the network.
VLAN hopping
STP manipulation
14 With IP voice systems on data networks, which two types of attacks target VoIP specifically? (Choose two.)
CoWPAtty
Kismet
SPIT
virus
vishing
16 An administrator wants to prevent a rogue Layer 2 device from intercepting traffic from multiple VLANs on a network. Which two actions help m
this type of activity? (Choose two.)
Disable DTP on ports that require trunking.
Turn off trunking on all trunk ports and manually configure each VLAN as required on each port.
17 How many Cisco Security Agent clients can one Management Center for CSA console support?
1,000
10,000
100,000
1,000,000
An attacker alters the MAC address of his host to match another known MAC address of a target host.
An attacker alters the MAC address of the switch to gain access to the network device from a rogue host device.
An attacker floods the MAC address table of a switch so that the switch can no longer filter network access based on MAC addresses.
19
Refer to the exhibit. Based on the output generated by the show monitor session 1 command, how will SPAN operate on the switch?
All traffic transmitted from VLAN 10 or received on VLAN 20 is forwarded to FastEthernet 0/1.
All traffic received on VLAN 10 or transmitted from VLAN 20 is forwarded to FastEthernet 0/1.
Native VLAN traffic received on VLAN 10 or transmitted from VLAN 20 is forwarded to FastEthernet 0/1.
Native VLAN traffic transmitted from VLAN 10 or received on VLAN 20 is forwarded to FastEthernet 0/1.
20 Which three switch security commands are required to enable port security on a port so that it will dynamically learn a single MAC address and d
the port if a host with any other MAC address is connected? (Choose three.)
switchport mode access
switchport port-security