click below
click below
Normal Size Small Size show me how
Netw 2 FA3
| Question | Answer |
|---|---|
| Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user? | accounting |
| VRRPv2 is a Cisco-proprietary FHRP that is designed to allow for transparent failover of a first-hop IPv4 device. | False |
| Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv6 load balancing? | GLBP for IPv6 |
| What is the result of a DHCP starvation attack? | Legitimate clients are unable to lease IP addresses. |
| What device is considered a supplicant during the 802.1X authentication process? | the client that is requesting authentication |
| Which component of AAA is used to determine which resources a user can access and which operations the user is allowed to perform? | authorization |
| AAA components are Authentication, Authorization, and Accuracy. | False |
| What is the description of Authentication in AAA? | Proves that users are who they say they are |
| Which one is a protocol that is used by AAA to authenticate users against a central database of usernames and password? | RADIUS |
| The active and standby HSRP routers send hello packets to the HSRP group multicast address every 3 seconds by default. | True |
| Which access control component, implementation, or protocol collects and reports usage data? | accounting |
| Which protocol advertises a virtual IP address to facilitate transparent failover of a Cisco routing device? | FHRP |
| This command shows information about the status of a port that is involved in the Etherchannel. | Show interfaces fa0/2 etherchannel |
| As part of the new security policy, all switches on the network are configured to automatically learn MAC addresses for each port. All running configurations are saved at the start and close of every business day. A severe thunderstorm causes an extended | sticky secure MAC addresses |
| By default, how many MAC addresses are permitted to be learned on a switch port with port security enabled? | 1 |
| Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user? | accounting |
| Which of the following is needed to be enable back the role of active in HSRP? | preempt |
| Which Layer 2 attack will result in legitimate users not getting valid IP addresses? | DHCP starvation |
| This command shows information about the reliability of the port channel. | Show interfaces port-channel1 |
| Which one Cisco solution help prevent DHCP starvation attacks? | DHCP Snooping |
| A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac. What is the purpose of this configuration command? | It checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body. |
| Which FHRP implementation is a nonproprietary IPv4-only election protocol which has one master router per group? | VRRPv2 |
| This command shows the list of ports that are involved in the port channel and the time since the ports were bundled. | Show etherchannel port-channel |
| Initial is an HRSP State meaning that the router is a candidate to become the next active rotuer and sends periodic hello messages. | False |
| Standby is an HRSP State meaning that the router is a candidate to become the next active rotuer and sends periodic hello messages. | True |
| 2950Switch(config-if)#switchport port-security 2950Switch(config-if)#switchport port-security mac-address sticky The Ethernet frame that is shown arrives on interface fa0/1. What functions will occur when this frame is received by 2950Switch? | Only host A will be allowed to transmit frames on fa0/1. |
| Which one is a broadband wireless technology? | satellite Internet |
| A laptop cannot connect to a wireless access point. Which troubleshooting step should be taken first? | Ensure that the wireless NIC is enabled. |
| Which type of wireless network is based on the 802.11 standard and a 2.4-GHz or 5-GHz radio frequency? | wireless local-area network |
| In wireless ad-hoc network _________ | access point is not required |
| Which one is a broadband wireless technology? | WiMax |
| Which one is a characteristic of IEEE 802.11b? | Maximum data signaling rate of 11 Mbps |
| Which one IEEE 802.11 wireless standards operate only in the 5 GHz range? | 802.11ac |
| . A network administrator of a college is configuring the WLAN user authentication process. Wireless users are required to enter username and password credentials that will be verified by a server. Which server would provide such service? | RADIUS |
| A network engineer is troubleshooting a newly deployed wireless network that is using the latest 802.11 standards. When users access high bandwidth services such as streaming video, the wireless network performance is poor. To improve performance the netw | The 5 GHz band has more channels and is less crowded than the 2.4 GHz band, which makes it more suited to streaming multimedia. |
| On a Cisco 3504 WLC dashboard, which option provides access to the full menu of features? | Advanced |
| A wireless network interface controller can work in _______ | both infrastructure mode and ad-hoc mode |
| On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to access and configure a WLAN for a specific security option such as WPA2? | WLANs |
| Which of the following answers describe features of the IEEE 802.11ac wireless standard? | 5.0 GHz frequency band |
| What is the description of Accounting in AAA? | Record what users do and what they access |
| Network Access Control or NAC includes AAA services. | True |
| What is the description of Authorization in AAA? | Determines what resources users can access or the operations they are allowed to perform |
| Which value to use in HSRP protocol election process? | priority |
| A network administrator needs to configure port security on a switch. Which Statement is true? | The sticky learning feature allows the addition of dynamically learned addresses to the running configuration. |
| Refer to the exhibit. A network engineer is troubleshooting host connectivity on a LAN that uses a first hop redundancy protocol. Which IPv4 gateway address should be configured on the host? | 192.168.2.100 |
| Next-Generation Firewall or NGFW provides a secure connection to remote users across a public network and into the enterprise network. | False |
| Select the action that results from executing these commands: Switch(config-if)# switchport port-security Switch(config-if)# switchport port-security mac-address sticky | A dynamically learned MAC address is saved in the running-configuration file. |
| Which command correctly verify whether port security has been configured on port FastEthernet 0/12 on a switch? | SW1# show running-config |
| Which protocol advertises a virtual IP address to facilitate transparent failover of a Cisco routing device? | FHRP |
| What security benefit is gained from enabling BPDU guard on PortFast enabled interfaces? | preventing rogue switches from being added to the network |
| Which access control component, implementation, or protocol collects and reports usage data? | accounting |
| VPN or Virtual Private Network provides stateful packet inspection, application visibility and control. | False |
| Data Breach is an attack in which an organization’s data servers or hosts are compromised to steal confidential information. | False |
| Which wireless network topology would be used by network engineers to provide a wireless network for an entire college building? | infrastructure |
| The IEEE 802.11g standard is backwards compatible with? | 802.11b |
| Which of the following are characteristic features of the IEEE 802.11n wireless standard? | 2.4 GHz frequency band |
| Multiple Input / Multiple Output (MIMO) is a wireless technology that allows for significant increase in data throughput due to the use of multiple antennas and multiple data streams. | True |
| Which of the following answers apply to the IEEE 802.11g wireless standard? | Maximum data signaling rate of 54 Mbps |
| Wireless LAN Controllers have Layer 2 switch ports and virtual interfaces that are created in software and are very similar to VLAN interfaces. | True |
| Which one is a broadband wireless technology? | municipal Wi-Fi |
| Which is characteristic of satellite internet connection? | Their upload speed is about 10 percent of their download speed. |
| Bob has set up a Wi-Fi network for his café that works well within the indoor area, but works poorly on the patio. What’s the least expensive option for making Wi-Fi work for the patio customers? | Replace the factory antennas on the wireless Access Point. |
| Institute of Electrical and Electronics Engineers (IEEE) – Specifies how a radio frequency is modulated to carry information. Maintains the standards for local and metropolitan area networks (MAN) with the IEEE 802 LAN/MAN family of standards. | True |
| Which WAN topology is most appropriate for a centrally located server farm with several satellite branches? | hub and spoke |
| Which access control component, implementation, or protocol audits what users actions are performed on the network? | accounting |
| Which access control component, implementation, or protocol controls what users can do on the network? | Which access control component, implementation, or protocol controls what users can do on the network? |
| What is the step 4 of sequence of stages that occur during the HSRP failover process. | The new forwarding router assumes both the IP and MAC addresses of the virtual router. |
| Which standards-based First Hop Redundancy Protocol is a Cisco supported alternative to Hot Standby Router Protocol? | VRRP |
| Which FHRP implementation is a nonproprietary protocol which relies on ICMP to provide IPv4 redundancy? | IRDP |
| What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices? | Disable both protocols on all interfaces where they are not required. |
| Which one is a requirement for an HSRP group? | one or more standby routers |
| Which access control component, implementation, or protocol is implemented either locally or as a server-based solution? | authentication |
| What is new in HSRPv2? | a greater number in hsrp group field |
| Which access control component, implementation, or protocol is based upon usernames and passwords? | authentication |
| VRRPv2 is a non-proprietary election protocol that dynamically assigns responsibility for one or more virtual routers to the VRRP routers on an IPv4 LAN. | True |
| What is the result of a DHCP starvation attack? | Legitimate clients are unable to lease IP addresses. |
| Refer to the exhibit. What activity is the router doing? | The router is currently forwarding packets. |
| Refer to the exhibit. A network administrator configured routers R1 and R2 as part of HSRP group 1. After the routers have been reloaded, a user on Host1 complained of lack of connectivity to the Internet The network administrator issued the show standby | the virtual IP address and the virtual MAC address for the HSRP group 1 |
| This command is used to check what port channel are configured on a switch. | Show etherchannel summary |
| GLBP is a Cisco-proprietary FHRP that protects data traffic from a failed router or circuit | True |
| Which access control component, implementation, or protocol restricts LAN access through publicly accessible switch ports? | 802.1X |
| Which FHRP implementation is Cisco-proprietary and permits only one router in a group to forward IPv6 packets? | HSRP for IPv6 |
| Which protocol should be used to mitigate the vulnerability of using Telnet to remotely manage network devices? | SSH |
| Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv4 load sharing? | GLBP |
| Next-Generation Firewall or NGFW provides stateful packet inspection, application visibility and control. | True |
| Which one command can be used to enable BPDU guard on a switch? | S1(config)# spanning-tree bpduguard default |
| DDoS is a coordinated attack from many devices, called zombies, with the intention of degrading or halting public access to an organization’s website and resources. | True |
| Which access control component, implementation, or protocol audits what users actions are performed on the network? | accounting |
| Refer to the exhibit. Port security has been configured on the Fa 0/12 interface of switch S1. What action will occur when PC1 is attached to switch S1 with the applied configuration? | Frames from PC1 will cause the interface to shut down immediately, and a log entry will be made. |
| Which one is a technique for mitigating VLAN attacks? | Set the native VLAN to an unused VLAN. |
| Which one Cisco solution help prevent DHCP starvation attacks? | Port Security |
| A network administrator enters the following commands on the switch SW1. SW1(config)# interface range fa0/5 – 10 SW1(config-if)# ip dhcp snooping limit rate 6 What is the effect after these commands are entered? | FastEthernet ports 5 through 10 can receive up to 6 DHCP discovery messages per second. |
| Which access control component, implementation, or protocol indicates success or failure of a client-requested service with a PASS or FAIL message? | authorization |
| The Network Summary page in Cisco WLC is a dashboard that provides a quick overview of configured wireless networks, associated access points (APs), and active clients. | True |
| Which of the following are characteristic features of the IEEE 802.11n wireless standard? | Maximum data signaling rate of up to 600 Mbps |
| Which type of management frame may regularly be broadcast by an AP? | beacon |
| You can configure your WLAN Router through web browser. | True |
| Which one IEEE 802.11 wireless standards operate only in the 5 GHz range? | 802.11a |
| The Cisco Wireless Controller (WLC) series devices provide a single solution to configure, manage and support corporate wireless networks, regardless of their size and locations. | True |
| Autonomous APs – Standalone devices configured through a command line interface or GUI. Each autonomous AP acts independently of the others and is configured and managed manually by an administrator. | True |
| Wi-Fi Alliance – Promotes the growth and acceptance of WLANs. It is an association of vendors whose objective is to improve the interoperability of products that are based on the 802.11 standard | True |
| Controller-based APs – Also known as lightweight APs (LAPs). Use Lightweight Access Point Protocol (LWAPP) to communicate with a LWAN controller (WLC). Each LAP is automatically configured and managed by the WLC. | True |
| Which statement is true about access points? | They can provide access within enterprises and to the public. |