Networking 205 Chapter 2

Front 1

What is the first action in the boot sequence when a switch is powered on?

Back 1

load a power-on self-test program

Front 2

An attacker has bypassed physical security and was able to connect a laptop to a Ethernet interface on a switch. If all the switch ports are configured with port security and the violation mode is set to factory-default, which action is taken against the attacker?

Back 2

Packets with unknown source addresses are dropped and the interface becomes error-disabled and turns off the port LED.

Front 3

What are two ways to make a switch less vulnerable to attacks like MAC address flooding, CDP attacks, and Telnet attacks? (Choose two.)

Back 3

Change passwords regularly.

Turn off unnecessary services.

Front 4

A network technician wants to implement SSH as the means by which a router may be managed remotely. What are two procedures that the technician should use to successfully complete this task?

Back 4

Configure authentication.

Define the asymmetrical keys.

Front 5

How can DHCP packets be used to threaten a switched LAN?

Back 5

Numerous DHCP requests are sent to the DHCP server from spoofed hosts, causing the DHCP address pool to become depleted.

Front 6

In an Ethernet network, frames smaller than 64 bytes are called ___________.

Back 6

runts

Front 7

What would be an ideal environment to carry out penetration tests?

Back 7

on an off-line test bed network that mimics the actual production network

Front 8

A network administrator plugs a new PC into a switch port. The LED for that port changes to solid green. What statement best describes the current status of the port?

Back 8

The port is operational and ready to transmit packets.

Front 9

A network administrator has configured ​VLAN 99 as the management VLAN and has configured it with an IP address and subnet mask. The administrator issues the show interface vlan 99 command and notices that the line protocol is down. Which action can change the state of the line protocol to up?

Back 9

Connect a host to an interface associated with VLAN 99

Front 10

What is the result of issuing the no switchport port-security mac-address sticky command on an interface with port security configured?​​

Back 10

The sticky secure MAC addresses remain part of the address table but are removed from the running configuration.

Front 11

Which configuration must be in place for the auto-MDIX feature to function on a switch interface?

Back 11

The speed and duplex of the interface must be configured for auto detect.

Front 12

The initialism _______ refers to a protocol that provides an encrypted connection. The protocol replaces the clear text Telnet protocol for Cisco device management.

Back 12

SSH

Front 13

What can be determined from the partial output of the show running-config command?

Back 13

This appears to be the default configuration of the switch.

Front 14

The switch and workstation are administratively configured for full-duplex operation. Which statement accurately reflects the operation of this link?

Back 14

No collisions will occur on this link.

Front 15

A production switch is reloaded and finishes with a Switch> prompt. What two facts can be determined?

Back 15

POST occurred normally.

A full version of the Cisco IOS was located and loaded.

Front 16

What conclusion can be drawn based on the partial output in the exhibit?

Back 16

A malfunctioning NIC can cause frames to be transmitted that are longer than the allowed maximum length.

Front 17

Two statements that are true regarding switch port security

Back 17

If fewer than the maximum number of MAC addresses for a port are configured statically, dynamically learned addresses are added to CAM until the maximum number is reached.

Dynamically learned secure MAC addresses are lost when the switch reboots.

Front 18

An administrator wants to use a network security auditing tool on a switch to verify which ports are not protected against a MAC flooding attack. For the audit to be successful, what important factor must the administrator consider?

Back 18

the aging-out period of the MAC address table

Front 19

In which type of attack does a malicious node request all available IP addresses in the address pool of a DHCP server in order to prevent legitimate hosts from obtaining network access?​

Back 19

DHCP starvation

Front 20

What is a function of the switch boot loader?

Back 20

to provide an environment to operate in when the switch operating system cannot be found

Front 21

Which two basic functions are performed by network security tools?

Back 21

revealing the type of information an attacker is able to gather from monitoring network traffic

simulating attacks against the production network to determine any existing vulnerabilities

Front 22

In which situation would a technician use the show interfaces switch command?

Back 22

when packets are being dropped from a particular directly attached host

Front 23

A network administrator configures the port security feature on a switch. The security policy specifies that each access port should allow up to two MAC addresses. When the maximum number of MAC addresses is reached, a frame with the unknown source MAC address is dropped and a notification is sent to the syslog server. Which security violation mode should be configured for each access port?

Back 23

protect

Front 24

Which method would mitigate a MAC address flooding attack?

Back 24

configuring port security

Front 25

What can be determined about port security from the information that is shown?

Back 25

The port violation mode is the default for any port that has port security enabled.

Front 26

What is one difference between using Telnet or SSH to connect to a network device for management purposes?

Back 26

Telnet sends a username and password in plain text, whereas SSH encrypts the username and password.

Front 27

Which interface is the default location that would contain the IP address used to manage a 24-port Ethernet switch?

Back 27

VLAN 1

Front 28

Which two statements are true about using full-duplex Fast Ethernet?

Back 28

Full-duplex Fast Ethernet offers 100 percent efficiency in both directions.

Performance is improved with bidirectional data flow.

Front 29

Which statement describes the port speed LED on the Cisco Catalyst 2960 switch?

Back 29

If the LED is green, the port is operating at 100 Mb/s.

Front 30

Which two features on a Cisco Catalyst switch can be used to mitigate DHCP starvation and DHCP spoofing attacks?

Back 30

port security

DHCP snooping

Front 31

The network administrator wants to configure Switch1 to allow SSH connections and prohibit Telnet connections. How should the network administrator change the displayed configuration to satisfy the requirement?

Back 31

Modify the transport input command.