多項(xiàng)選擇題What are two methods of mitigating MAC address flooding attacks?()

A.Place unused ports in a common VLAN.
B.Implement private VLANs.
C.Implement DHCP snooping.
D.Implement port security.
E.Implement VLAN access maps.


您可能感興趣的試卷

你可能感興趣的試題

2.多項(xiàng)選擇題Which two statements about a wireless repeater topology are true?()

A.A wireless repeater is an access point that is not connected to the wired LAN.
B.The repeater feature is only available in lightweight access point topologies.
C.The SSID of the root access point must be configured on the repeater access point.
D.This topology requires a 10 - 15 percent overlap between a wired access point and the wireless repeater.
E.This topology requires a 15 - 25 percent overlap between a wired access point and the wireless repeater.
F.To avoid interference, the repeater access point must use a different channel from what the root access point uses.

3.多項(xiàng)選擇題

You need to configure the WLAN client utility on a new machine.
 Which two of the following are true regarding this utility? ()

A.The Aironet Desktop Utility (ADU) can be used to enable or disable the adapter radio and to configure LEAP authentication with dynamic WEP.
B.In Windows XP environment, a client adapter can only be configured and managed with the Microsoft Configuration Manager.
C.The Microsoft Wireless Configuration Manager can be configured to display the Aironet System Tray Utility (ASTU) icon in the Windows system tray.
D.The Cisco Aironet Desktop Utility (ADU) and the Microsoft Wirelss Configuration Manager can both be enabled at the same time to setup WLAN client cards.

4.單項(xiàng)選擇題

A Cisco Aironet Wireless LAN Adapter CB21AG is inserted into a user’s PC cardbus slot. Both the green status LED and the amber activity LED are blinking slowly. 
What is the condition of the adapter? ()

A.The adapter is scanning for the wireless network for which it is configured.
B.The adapter is in power save mode.
C.The adapter is transmitting or receiving data while associated to an access point or another client.
D.The adapter is not receiving power.
E.The adapter is associated to an access point or another client.
F.None of the other alternatives apply

5.單項(xiàng)選擇題

You suspect that a hacker may be performing a MAC address flooding attack somewhere within the    network. 
Which description correctly describes a MAC address flooding attack?()

A.The attacking device spoofs a source MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
B.Frames with unique, invalid destination MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.
C.The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the destination address found in the Layer 2 frames sent by the valid network device.
D.The attacking device crafts ARP replies intended for valid hosts. The MAC address of the attacking device then becomes the source address found in the Layer 2 frames sent by the valid network device.
E.The attacking device spoofs a destination MAC address of a valid host currently in the CAM table. The switch then forwards frames destined for the valid host to the attacking device.
F.Frames with unique, invalid source MAC addresses flood the switch and exhaust CAM table space. The result is that new entries cannot be inserted because of the exhausted CAM table space, and traffic is subsequently flooded out all ports.
G.None of the other alternatives apply

6.單項(xiàng)選擇題

Study the exhibit shown below carefully.

In this scenario the service provider wants to ensure that switch S1 is the root switch for its own network and the network of . 
On which interfaces should root guard be configured to ensure that this happens?()
 

A.Interfaces 11 and 12
B.Interfaces 1, 2, 3, and 4
C.Interfaces 5 and 6
D.Interfaces 5, 6, 7, and 8
E.Interfaces 1 and 2
F.Interfaces 1, 3, 5, and 6

7.多項(xiàng)選擇題

In order to enhance worker productivity, a Cisco wireless network has been implemented at all    locations. 
Which three statements regarding WLAN are true?()

A.A WLAN client will operate in half-duplex mode.
B.The Aironet 1230 access point is an example of an access point that operates solely as a lightweight access point.
C.Ad hoc mode allows mobile clients to connect directly without an intermediate AP.
D.WLANs are designed to share the medium and can easily handle an increased demand of channel contention.
E.A lightweight AP receives control and configuration from a WLAN controller to which it is associated.
F.Another term for infrastructure mode is independent service set (IBSS).

8.單項(xiàng)選擇題

Switch 1 was configured as shown below:

Based on the output shown above, 
which statement is true? ()

A.IP traffic matching access list    is forwarded through VLANs 5-10.
B.All VLAN traffic in VLANs 5-10 that match access list    will be forwarded, and all else will be dropped.
C.IP traffic matching VLAN list 5-10 will be forwarded, and all other traffic will be dropped.
D.All VLAN traffic matching VLAN list 5-10 will be forwarded, and all traffic matching access list    is dropped.
E.None of the other alternatives apply

9.多項(xiàng)選擇題Which of the following are functions that are often provided by an ITSP but are not typically  provided by the PSTN?()

A. QoS
B. call setup and teardown
C. call routing
D. call supervision
E. audio signal compression

10.單項(xiàng)選擇題Which of the following is not information provided from an IP phone to a Catalyst switch using  CDP?()

A. device PoE requirements
B. device IP address
C. device voice VLAN ID
D. device platform

最新試題

DS2 has not become the active device for Vlan103’s HSRP group even though all interfaces are active. As related to Vlan103’s HSRP group. What can be done to make the group function properly ? ()

題型:單項(xiàng)選擇題

Refer to the exhibit. STP has been implemented in the network. Switch SW_A is the root switch for the default VLAN. To reduce the broadcast domain, the network administrator decides to split users on the network into VLAN 2 and VLAN 10. The administrator issues the command spanning-tree vlan 2 root primary on switch SW_A. What will happen as a result of this change?()

題型:單項(xiàng)選擇題

Refer to the exhibit. What command was issued on the Layer 3 switch Sw1 between Exhibit #1 and Exhibit #2?()

題型:單項(xiàng)選擇題

Which two statements are true when the extended system ID feature is enabled? ()

題型:多項(xiàng)選擇題

Which three statements about STP timers are true?()

題型:多項(xiàng)選擇題

Refer to the exhibit. Based on the output of the show spanning-tree command, which statement is true? ()

題型:單項(xiàng)選擇題

Which two statements are true about BPDU port-guard and BPDU filtering?()

題型:多項(xiàng)選擇題

What will occur when a nonedge switch port that is configured for Rapid Spanning Tree does not receive a BPDU from its neighbor for three consecutive hello time intervals?()

題型:單項(xiàng)選擇題

Refer to the exhibit. What does the command channel-group 1 mode desirable do? () 

題型:單項(xiàng)選擇題

Refer to the exhibit. Switch 15 is configured as the root switch for VLAN 10 but not for VLAN 20. If the STP configuration is correct, what will be true about Switch 15?()

題型:單項(xiàng)選擇題