Refer to the exhibit. Dynamic ARP inspection （DAI） is enabled on switch SW_A only. Both Host_A and Host_B acquire their IP addresses from the DHCP server connected to switch SW_A.
What would the outcome be if Host_B initiated an ARP spoof attack toward Host_A ？ （）
A. The spoof packets will be inspected at the ingress port of switch SW_A and will be permitted.
B. The spoof packets will not be inspected at the ingress port of switch SW_A and will be permitted.
C. The spoof packets will not be inspected at the ingress port of switch SW_A and will be dropped.
D. The spoof packets will be inspected at the ingress port of switch SW_A and will be dropped.
您可能感興趣的試卷
你可能感興趣的試題
Refer to the exhibit.
What will happen to traffic within VLAN 14 with a source address of 172.16.10.5？ （）
A. The traffic will be forwarded to the router processor for further processing.
B. The traffic will be dropped.
C. The traffic will be forwarded to the TCAM for further processing.
D. The traffic will be forwarded without further processing.
A hacker on the Company network is attempting to hop onto a different VLAN.
Which two statements about VLAN hopping are true？ （）
A. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
B. Configuring an interface with the "switchport mode dynamic" command will prevent VLAN hopping.
C. Attacks are prevented by utilizing the port-security feature.
D. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
E. An end station attempts to redirect VLAN traffic by broadcasting multiple ARP requests.
The Company security administrator wants to prevent VLAN hopping on the network.
What is one method that can be used to do this？ （）
A. Attacks are prevented by utilizing the port-security feature.
B. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
C. Configuring an interface with the switchport mode dynamic command will prevent VLAN hopping.
D. An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q encapsulation.
E. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
The Company security administrator is concerned with VLAN hopping based attacks.
Which two statements about these attacks are true？ （）
A. Attacks are prevented by utilizing the port-security feature.
B. An end station attempts to gain access to all VLANs by transmitting Ethernet frames in the 802.1q encapsulation.
C. Configuring an interface with the switchport mode dynamic command will prevent VLAN hopping.
D. An end station attempts to redirect VLAN traffic by transmitting Ethernet frames in the 802.1q encapsulation.
E. Configuring an interface with the "switchport mode access" command will prevent VLAN hopping.
Refer to the exhibit. PCs in VLAN 2 are not able to communicate with PCs in VLAN 3.
What could be the cause？（）
A. IP routing is not enabled.
B. VTP is not configured correctly on the interfaces.
C. The command mls rp management-interface is missing.
D. The command mls rp ip must be disabled to enable the routing.
You are configuring a Cisco multilayer switch for the Company network.
Which command would you use to configure a port to act as a routed interface？（）
A. ip routing
B. switchport mode trunk
C. no switchport
D. switchport trunk native vlan 1
E. None of the other alternatives apply
Which of the following could be used to provide a Layer 3 data path between separate VLANs？（）
A. VLAN trunking
B. An external router
C. An internal route processor
D. VLAN capable bridge
E. EtherChannel
Inter-VLAN routing has been implemented in the Company network. In VLAN routing，
what are some of the disadvantages of designing a router-on-stick configuration？ （）
A. InterVLAN routing cannot be filtered by the router.
B. The router becomes a single point of failure for the network.
C. Routers will not route STP BPDUs.
D. There is a possibility of inadequate bandwidth for each VLAN.
E. Additional overhead on the router can occur.
F. NetFlow Switching is required for InterVLAN accounting.
The Company network needs to pass traffic between VLANs.
Which device should be used to accomplish this？ （）
A. Hub
B. Switch
C. Router
D. Bridge
E. None of the other alternatives apply
pany has implemented numerous multilayer switches that utilize FIB tables.
Which statement is true about the Forward Information Base （FIB） table？（）
A. The FIB is derived from the IP routing table and is optimized for maximum lookup throughput.
B. The FIB table is derived from the Address Resolution Protocol table， and it contains Layer 2 rewrite （MAC） information for the next hop.
C. When the FIB table is full， a wildcard entry redirects traffic to the Layer 3 engine.
D. The FIB lookup is based on the Layer 2 destination MAC address.
E. None of the other alternatives apply
最新試題
Based on the show spanning-tree vlan 200 output shown in the exhibit， which two statements about the STP process for VLAN 200 are true？ （）
Which two statements are true when the extended system ID feature is enabled？ （）
Which option correctly identifies the Cisco IOS switching methods in descending order from the fastest method to the slowest method？（）
Which two statements about the various implementations of STP are true？（）
Refer to the exhibit. For what purpose is the command show ip cef used？（）
Which router redundancy protocol cannot be configured for interface tracking？（）
Refer to the exhibit. Initially， LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link？（）
Refer to the exhibit. Which Virtual Router Redundancy Protocol （VRRP） statement is true about the roles of the master virtual router and the backup virtual router？（）
Refer to the exhibit. The command switchport mode access is issued on interface FastEthernet0/13 on switch CAT1. What will be the result？（）
What must be the same to make multiple switches part of the same Multiple Spanning Tree （MST）？（）