Ccna2 5-6-10

Front 1

What additional information is contained in the 12-bit extended system ID of a BPDU?

Back 1

VLAN ID

Front 2

During the implementation of Spanning Tree Protocol, all switches are rebooted by the network administrator. What is the first step of the spanning-tree election process?

Back 2

All the switches send out BPDUs advertising themselves as the root bridge.

Front 3

Which STP port role is adopted by a switch port if there is no other port with a lower cost to the root bridge?

Back 3

root port

Front 4

Which two concepts relate to a switch port that is intended to have only end devices attached and intended never to be used to connect to another switch?

Back 4

edge port

PortFast

Front 5

Which three components are combined to form a bridge ID?

Back 5

extended system ID

bridge priority

MAC address

Front 6

In which two port states does a switch learn MAC addresses and process BPDUs in a PVST network?

Back 6

forwarding

learning

Front 7

If no bridge priority is configured in PVST, which criteria is considered when electing the root bridge?

Back 7

lowest MAC address

Front 8

When the show spanning-tree vlan 33 command is issued on a switch, three ports are shown in the forwarding state. In which two port roles could these interfaces function while in the forwarding state?

Back 8

designated

root

Front 9

What is the function of STP in a scalable network?

Back 9

It disables redundant paths to eliminate Layer 2 loops.

Front 10

What is a characteristic of spanning tree?

Back 10

It is enabled by default on Cisco switches.

Front 11

Which spanning tree standard supports only one root bridge so that traffic from all VLANs flows over the same path?

Back 11

802.1D

Front 12

What is the purpose of the Spanning Tree Protocol (STP)?

Back 12

prevent layer 2 loops

Front 13

What is the value used to determine which port on a non-root bridge will become a root port in a STP network?

Back 13

the path cost

Front 14

What are two drawbacks to turning spanning tree off and having multiple paths through the Layer 2 switch network?

Back 14

the MAC address table becomes unstable

Broadcast frame are transmitted indefinitely

Front 15

A small company network has six interconnected Layer 2 switches. Currently all switches are using the default bridge priority value. Which value can be used to configure the bridge priority of one of the switches to ensure that it becomes the root bridge in this design?

Back 15

28672

Front 16

The administrator tried to create an EtherChannel between S1 and the other two switches via the commands that are shown, but was unsuccessful. What is the problem?

Back 16

Traffic cannot be sent to two different switches through the same EtherChannel link.

Front 17

Which statement is true regarding the use of PAgP to create EtherChannels?

Back 17

it is Cisco proprietary

Front 18

What are two requirements to be able to configure an EtherChannel between two switches?

Back 18

all the interfaces need to work at the same speed

all the interfaces need to be working in the same duplex mode

Front 19

On the basis of the output that is shown, what can be determined about the EtherChannel bundle?

Back 19

A Cisco proprietary protocol was used to negotiate the EtherChannel link.

Front 20

Which two parameters must match on the ports of two switches to create a PAgP EtherChannel between the switches?

Back 20

speed

Vlan information

Front 21

A network administrator is configuring an EtherChannel link between two switches, SW1 and SW2. Which statement describes the effect after the commands are issued on SW1 and SW2?

Back 21

The EtherChannel fails to establish.

Front 22

A network administrator configured an EtherChannel link with three interfaces between two switches. What is the result if one of the three interfaces is down?

Back 22

The remaining two interfaces continue to load balance traffic.

Front 23

A network administrator is configuring an EtherChannel link between switches SW1 and SW2 by using the command SW1(config-if-range)# channel-group 1 mode auto . Which command must be used on SW2 to enable this EtherChannel?

Back 23

SW2(config-if-range)# channel-group 1 mode desirable

Front 24

Which technology is an open protocol standard that allows switches to automatically bundle physical ports into a single logical link?

Back 24

LACP

Front 25

What is a requirement to configure a trunking EtherChannel between two switches?

Back 25

The allowed range of VLANs must be the same on both switches.

Front 26

What are two advantages of using LACP?

Back 26

It allows directly connected switches to negotiate an EtherChannel link.

It allows the use of multivendor devices.

Front 27

A switch is configured to run STP. What term describes a non-root port that is permitted to forward traffic on the network?

Back 27

designated port

Front 28

What are two advantages of EtherChannel?

Back 28

Spanning Tree Protocol views the physical links in an EtherChannel as one logical connection.

Configuring the EtherChannel interface provides consistency in the configuration of the physical links.

Front 29

What are the possible port roles for ports A, B, C, and D in this RSTP-enabled network?

Back 29

alternate, designated, root, root

Front 30

Which switching technology would allow each access layer switch link to be aggregated to provide more bandwidth between each Layer 2 switch and the Layer 3 switch?

Back 30

EtherChannel

Front 31

A set of switches is being connected in a LAN topology. Which STP bridge priority value will make it least likely for the switch to be selected as the root?

Back 31

61440

Front 32

In which two PVST+ port states are MAC addresses learned?

Back 32

learning

forwarding

Front 33

Which port role is assigned to the switch port that has the lowest cost to reach the root bridge?

Back 33

root port

Front 34

A switch is configured to run STP. What term describes the switch port closest, in terms of overall cost, to the root bridge?

Back 34

root port

Front 35

A switch is configured to run STP. What term describes a field used to specify a VLAN ID?

Back 35

extended system ID

Front 36

A switch is configured to run STP. What term describes the reference point for all path calculations?

Back 36

root bridge

Front 37

A switch is configured to run STP. What term describes a field that has a default value of 32,768 and is the initial deciding factor when electing a root bridge?

Back 37

bridge priority

Front 38

Which statement describes an EtherChannel implementation?

Back 38

A trunked port can be part of an EtherChannel bundle.

Front 39

Which statement describes a characteristic of EtherChannel?

Back 39

It is made by combining multiple physical links that are seen as one link between two switches.

Front 40

Which two channel group modes would place an interface in a negotiating state using PAgP?

Back 40

desirable

auto

Front 41

Which mode configuration setting would allow formation of an EtherChannel link between switches SW1 and SW2 without sending negotiation traffic?

Back 41

SW1: on

SW2: on

Front 42

When EtherChannel is configured, which mode will force an interface into a port channel without exchanging aggregation protocol packets?

Back 42

on

Front 43

What are two load-balancing methods in the EtherChannel technology?

Back 43

source IP to destination IP

source MAC to destination MAC

Front 44

Which protocol provides up to 16 instances of RSTP, combines many VLANs with the same physical and logical topology into a common RSTP instance, and provides support for PortFast, BPDU guard, BPDU filter, root guard, and loop guard?

Back 44

MST

Front 45

What is the outcome of a Layer 2 broadcast storm?

Back 45

New traffic is discarded by the switch because it is unable to be processed.

Front 46

Which two network design features require Spanning Tree Protocol (STP) to ensure correct network operation?

Back 46

redundant links between Layer 2 switches

removing single points of failure with multiple Layer 2 switches

Front 47

A network administrator has configured an EtherChannel between two switches that are connected via four trunk links. If the physical interface for one of the trunk links changes to a down state, what happens to the EtherChannel?

Back 47

The EtherChannel will remain functional.

Front 48

Which attack encrypts the data on hosts in an attempt to extract a monetary payment from the victim?

Back 48

Ransomware

Front 49

Which devices are specifically designed for network security?

Back 49

VPN-enabled router

NGFW

NAC

Front 50

Which device monitors SMTP traffic to block threats and encrypt outgoing messages to prevent data loss?

Back 50

ESA

Front 51

Which device monitors HTTP traffic to block access to risky sites and encrypt outgoing messages?

Back 51

WSA

Front 52

Which AAA component is responsible for collecting and reporting usage data for auditing and billing purposes?

Back 52

Accounting

Front 53

Which AAA component is responsible for controlling who is permitted to access the network?

Back 53

Authentication

Front 54

Which AAA component is responsible for determining what the user can access?

Back 54

Authorization

Front 55

In an 802.1X implementation, which device is responsible for relaying responses?

Back 55

Authenticator

Front 56

Which of the following mitigation techniques are used to protect Layer 3 through Layer 7 of the OSI Model?

Back 56

VPN

Firewalls

IPS devices

Front 57

Which of the following mitigation techniques prevents many types of attacks including MAC address table overflow and DHCP starvation attacks?

Back 57

Port security

Front 58

Which of the following mitigation techniques prevents MAC and IP address spoofing?

Back 58

IPSG

Front 59

Which of the following mitigation techniques prevents ARP spoofing and ARP poisoning attacks?

Back 59

DAI

Front 60

Which of the following mitigation techniques prevents DHCP starvation and DHCP spoofing attacks?

Back 60

DHCP snooping

Front 61

What is the behavior of a switch as a result of a successful MAC address table attack?

Back 61

The switch will forward all received frames to all other ports within the VLAN

Front 62

What would be the primary reason a threat actor would launch a MAC address overflow attack?

Back 62

So that the threat actor can see frames that are destined for other devices.

Front 63

What mitigation technique must be implemented to prevent MAC address overflow attacks?

Back 63

Port security

Front 64

A threat actor changes the MAC address of the threat actor's device to the MAC address of the default gateway. What type of attack is this?

Back 64

Address spoofing

Front 65

A threat actor sends a BPDU message with priority 0. What type of attack is this?

Back 65

STP Attack

Front 66

A threat actor leases all the available IP addresses on a subnet. What type of attack is this?

Back 66

DHCP starvation

Front 67

A threat actor sends a message that causes all other devices to believe the MAC address of the threat actor's device is the default gateway. What type of attack is this?

Back 67

ARP spoofing

Front 68

A threat actor configures a host with the 802.1Q protocol and forms a trunk with the connected switch. What type of attack is this?

Back 68

VLAN hopping

Front 69

A threat actor discovers the IOS version and IP addresses of the local switch. What type of attack is this?

Back 69

CDP reconnaissance

Front 70

What two protocols are supported on Cisco devices for AAA communications?

Back 70

TACACS+

RADIUS

Front 71

Which service is enabled on a Cisco router by default that can reveal significant information about the router and potentially make it more vulnerable to attack?

Back 71

CDP

Front 72

When security is a concern, which OSI Layer is considered to be the weakest link in a network system?​

Back 72

Layer 2

Front 73

Which Layer 2 attack will result in a switch flooding incoming frames to all ports?

Back 73

MAC address overflow

Front 74

Why is authentication with AAA preferred over a local database method?

Back 74

It provides a fallback authentication method if the administrator forgets the username or password

Front 75

In a server-based AAA implementation, which protocol will allow the router to successfully communicate with the AAA server?

Back 75

RADIUS

Front 76

Which Cisco solution helps prevent MAC and IP address spoofing attacks?

Back 76

IP source guard

Front 77

What is the purpose of AAA accounting?

Back 77

to collect and report application usage

Front 78

Which Layer 2 attack will result in legitimate users not getting valid IP addresses?

Back 78

DHCP starvation

Front 79

Which three Cisco products focus on endpoint security solutions?

Back 79

Web security appliance

Email security appliance

NAC appliance

Front 80

In the 802.1X standard, the client attempting to access the network is referred to as the supplicant.

Back 80

True

Front 81

What is involved in an IP address spoofing attack?

Back 81

A legitimate network IP address is hijacked by a rogue node.

Front 82

What three services are provided by the AAA framework?

Back 82

accounting

authentication

authorization

Front 83

Because of implemented security controls, a user can only access a server with FTP. Which AAA component accomplishes this?

Back 83

authorization

Front 84

What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow?

Back 84

enable port security