The Company security administrator is concerned with VLAN hopping based attacks.
Which two statements about these attacks are true？ （）
A. Attacks are prevented by utilizing the port-security feature.
B. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
C. Configuring an interface with the switchport mode dynamic command will prevent VLAN hopping.
D. An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q encapsulation.
E. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
您可能感興趣的試卷
你可能感興趣的試題
Refer to the exhibit. PCs in VLAN 2 are not able to communicate with PCs in VLAN 3.
What could be the cause？（）
A. IP routing is not enabled.
B. VTP is not configured correctly on the interfaces.
C. The command mls rp management-interface is missing.
D. The command mls rp ip must be disabled to enable the routing.
You are configuring a Cisco multilayer switch for the Company network.
Which command would you use to configure a port to act as a routed interface？（）
A. ip routing
B. switchport mode trunk
C. no switchport
D. switchport trunk native vlan 1
E. None of the other alternatives apply
Which of the following could be used to provide a Layer 3 data path between separate VLANs？（）
A. VLAN trunking
B. An external router
C. An internal route processor
D. VLAN capable bridge
E. EtherChannel
Inter-VLAN routing has been implemented in the Company network. In VLAN routing，
what are some of the disadvantages of designing a router-on-stick configuration？ （）
A. InterVLAN routing cannot be filtered by the router.
B. The router becomes a single point of failure for the network.
C. Routers will not route STP BPDUs.
D. There is a possibility of inadequate bandwidth for each VLAN.
E. Additional overhead on the router can occur.
F. NetFlow Switching is required for InterVLAN accounting.
The Company network needs to pass traffic between VLANs.
Which device should be used to accomplish this？ （）
A. Hub
B. Switch
C. Router
D. Bridge
E. None of the other alternatives apply
pany has implemented numerous multilayer switches that utilize FIB tables.
Which statement is true about the Forward Information Base （FIB） table？（）
A. The FIB is derived from the IP routing table and is optimized for maximum lookup throughput.
B. The FIB table is derived from the Address Resolution Protocol table， and it contains Layer 2 rewrite （MAC） information for the next hop.
C. When the FIB table is full， a wildcard entry redirects traffic to the Layer 3 engine.
D. The FIB lookup is based on the Layer 2 destination MAC address.
E. None of the other alternatives apply
Refer to the exhibit.
What type of attack is being defended against？ （）
A. snooping attack
B. rogue device attack
C. STP attack
D. VLAN attack
E. spoofing attack
F. MAC flooding attack
Refer to the exhibit.
What will happen to traffic within VLAN 14 with a source address of 172.16.10.5？（）
A. The traffic will be forwarded to the router processor for further processing.
B. The traffic will be dropped.
C. The traffic will be forwarded to the TCAM for further processing.
D. The traffic will be forwarded without further processing.
Refer to the exhibit.
What will happen when one more user is connected to interface FastEthernet 5/1？（）
A. The first address learned on the port will be removed from the secure address list and be replaced with the new address.
B. All secure addresses will age out and be removed from the secure address list. This will cause the security violation counter to increment.
C. The packets with the new source addresses will be dropped until a sufficient number of secure MAC addresses are removed from the secure address list.
D. The interface will be placed into the error-disabled state immediately， and an SNMP trap notification will be sent.
Refer to the exhibit. The show port-security interface fa0/1 command was issued on switch SW1. Given the output that was generated，
which two security statement are true？ （）
A. Interface FastEthernet 0/1 was configured with the switchport port-security aging command.
B. Interface FastEthernet 0/1 was configured with the switchport port-security protect command.
C. Interface FastEthernet 0/1 was configured with the switchport port-security violation restrict command.
D. When the number of secure IP addresses reaches 10， the interface will immediately shut down.
E. When the number of secure MAC addresses reaches 10， the interface will immediately shut down and an SNMP trap notification will be sent.
最新試題
Refer to the exhibit. Initially， LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link？（）
Refer to the exhibit. STP has been implemented in the network. Switch SW_A is the root switch for the default VLAN. To reduce the broadcast domain， the network administrator decides to split users on the network into VLAN 2 and VLAN 10. The administrator issues the command spanning-tree vlan 2 root primary on switch SW_A. What will happen as a result of this change？（）
During routine maintenance， it became necessary to shutdown G1/0/1 on DS1 and DS2. All other interface were up. During this time， DS1 became the active device for Vlan104’s HSRP group. As related to Vlan104’s HSRP group. What can be done to make the group function properly ？ （）
What is the configured priority value of the Vlan105’s group on DS2 ？（）
Which statement is correct about RSTP port roles？（）
Refer to the exhibit. On the basis of the output of the show spanning-tree inconsistentports command， which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true？（）
What two things will occur when an edge port receives a BPDU？（）
Which two statements about the various implementations of STP are true？（）
Refer to the exhibit. Based on the output of the show spanning-tree command， which statement is true？ （）
Refer to the exhibit and the partial configuration of switch SW_A and SW_B. STP is configured on all switches in the network. SW_B receives this error message on the console port：00：06：34： %CDP-4-DUPLEX_MISMATCH： duplex mismatch discovered on FastEthernet0/5 （not half duplex）， with SW_A FastEthernet0/4 （half duplex） ， with TBA05071417（Cat6K-B） 0/4 （half duplex）. What would be the possible outcome of the problem？（）