A.DAI intercept all ARP packets on untrusted ports
B.DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the DHCP Snooping database.
C.DAI is used to prevent against a DHCP Snooping attack.
D.DAI forwards all ARP packets received on a trusted interface without any checks.
E.DAI forwards all ARP packets on untrusted ports.
F.DAI determines the validity of an ARP packet based on the valid MAC address-to-IP address bindings stored in the CAM table.
您可能感興趣的試卷
你可能感興趣的試題
A.Classifying and marking traffic should be done as close to the traffic source as possible.
B.Classifying and marking traffic should be done at the distribution layer.
C.Traffic is classified and marked as it travels through the network.
D.If untrusted traffic enters a switch， it can be marked with a new QoS value appropriate for the policy in place.
E.The trust boundary moves depending on the type of traffic entering the network.
Refer to the exhibit.
What problem is preventing users on VLAN 100 from pinging addresses on VLAN 200？（）
A.No default route on DLS1.
B.Encapsulation mismatch between switches.
C.Native VLAN mismatch.
D.Subinterfaces should be created on Fa0/7 and Fa0/8 on DLS1.
E.Trunking needs to be enabled.
F.The ip routing command is missing on DLS1.
Cisco Express Forwarding has been enabled on router TK1.
With CEF， prefixes that require exception processing can be cached with one of which four special adjacencies？ （）
A.Kick
B.Drop
C.Forward
D.Null
E.Discard
F.Glean
G.Express
Your boss， Miss ，is interested in CEF.
What should you tell her？ （）
A.The FIB lookup is based on the Layer 3 destination address prefix （shortest match）.
B.The adjacent table is derived from the ARP table.
C.The FIB table is derived from the IP routing table.
D.When the adjacency table is full， a CEF TCAM table entry points to the Layer 3 engine to redirect the adjacency.
E.CEF IP destination prefixes are stored in the TCAM table， from the least specific to the most specific entry.
F.When the CEF TCAM table is full， packets are dropped.
Refer to the exhibit. DHCP snooping is enabled for selected VLANs to provide security on the network.
How do the switch ports handle the DHCP messages？（）
A.Ports Fa2/1 and Fa2/2 source DHCP requests only. Port Fa3/1 is eligible to source all DHCP messages and respond to DHCP requests.
B.Ports Fa2/1 and Fa2/2 respond to DHCP requests only. Port Fa3/1 is eligible to source all DHCP messages.
C.Ports Fa2/1 and Fa2/2 are eligible to source all DHCP messages and respond to DHCP requests. Port Fa3/1 can source DHCP request only.
D.All three ports， Fa2/1， Fa2/2， and Fa3/1， are eligible to source all DHCP messages and respond to DHCP requests.
Exhibit：
You work as a network administrator at. You study the exhibit carefully.
Which configuration on the HSRP neighboring device ensures that it becomes the active HSRP device in the event that port fa1/1 on 1 goes down？ （）
A. 2（config-if）#ip address 10.10.10.2 255.255.255.0 2（config-if）#standby 1 priority 200 2（config-if）#standby 1 ip 10.10.10.10
B. 2（config-if）# ip address 10.10.10.2 255.255.255.0 2（config-if）#standby 1 priority 195 2（config-if）#standby 1 preempt 2（config-if）#standby 1 ip 10.10.10.10
C. 2（config-if）# ip address 10.10.10.2 255.255.255.0 2（config-if）#standby 1 priority 190 2（config-if）#standby 1 ip 10.10.10.10 2（config-if）#standby 1 track interface fa 1/1
D. 2（config-if）# ip address 10.10.10.2 255.255.255.0 2（config-if）#standby 1 priority 200 2（config-if）#standby 1 preempt 2（config-if）#standby 1 ip 10.10.10.10 2（config-if）#standby 1 track interface fa 1/1
You have configured the "config network webmode enable" command on a Cisco device.
What is the purpose of this command？ （）
A.To allow HTTP access to the WLAN controller
B.To allow SSH access to the CLI of the WLAN controller
C.To allow SSL access to the CLI of the WLAN controller
D.To allow HTTPS access to the WLAN controller
E.None of the other alternatives apply
A.When the voice VLAN feature is enabled， all untagged voice and data traffic is sent through the voice VLAN.
B.The voice VLAN feature is enabled by default.
C.The IP phone overrides the priority of all incoming data traffic （tagged and untagged） and sets the CoS value to 0.
D.The default CoS value is 1 for incoming voice and data traffic.
You work as a network engineer for. You study the exhibit carefully.
What type of attack would be mitigated by this configuration？（）
A.CDP manipulation
B.VLAN hopping
C.MAC spoofing
D.MAC flood attack
E.ARP spoofing
F.spanning tree compromises
You want to enhance the security within the LAN and prevent VLAN hopping.
What two steps can be taken to help prevent this？（）
A.Enable BPD guard
B.Disable CDP on ports where it is not necessary
C.Place unused ports in a common unrouted VLAN
D.Prevent automatic trunk configuration
E.Implement port security
最新試題
Examine the diagram. A network administrator has recently installed the above switched network using 3550s and would like to control the selection of the root bridge.Which switch should theadministrator configure as the root bridge and which configuration command must theadministrator enter to accomplish this？（）
Refer to the exhibit. What does the command channel-group 1 mode desirable do？ （）
Refer to the exhibit. LACP has been configured on Switch1 as shown. Which is the correct command set to configure LACP on Switch2？（）
Which router redundancy protocol cannot be configured for interface tracking？（）
Refer to the exhibit. On the basis of the output of the show spanning-tree inconsistentports command， which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true？（）
Which two statements about the various implementations of STP are true？（）
During routine maintenance， G1/0/1 on DS1 was shutdown. All other interface were up. DS2 became the active HSRP device for Vlan101 as desired. However， after G1/0/1 on DS1 was reactivated. DS1 did not become the active HSRP device as desired. What need to be done to make the group for Vlan101 function properly ？ （）
Which three statements about STP timers are true？（）
Refer to the exhibit. Initially， LinkA is connected and forwarding traffic. A new LinkB is then attached between SwitchA and HubA. Which two statements are true about the possible result of attaching the second link？（）
Refer to the exhibit. For what purpose is the command show ip cef used？（）