Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
M6-8 - Networking2
(for revision)Networking 2/IT0015
| Question | Answer |
|---|---|
| _______________________________________________________________________ | (2wrong) (-1 possibly right)(1 bugged question) |
| Which one is a protocol that is used by AAA to authenticate users against a central database of usernames and password? | TACACS+ |
| DDoS is a coordinated attack from many devices, called zombies, with the intention of degrading or halting public access to an organization’s website and resources. | True |
| GLBP is a Cisco-proprietary FHRP that protects data traffic from a failed router or circuit | True |
| What is the step 2 of sequence of stages that occur during the HSRP failover process. | The standby router assumes the role of the forwarding router. |
| Refer to the exhibit. Which is used in the topology? | EtherChannel |
| Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv6 load balancing? | GLBP for IPv6 |
| Which Layer 2 attack will result in legitimate users not getting valid IP addresses? | DHCP starvation |
| Which one is a protocol that is used by AAA to authenticate users against a central database of usernames and password? | RADIUS |
| Which nonproprietary protocol provides router redundancy for a group of routers which support IPv4 LANs? | VRRPv2 |
| HSRP a non-proprietary election protocol that dynamically assigns responsibility for one or more virtual routers to the VRRP routers on an IPv4 LAN. | False |
| Which one Cisco solution help prevent DHCP starvation attacks? | DHCP Snooping |
| VPN or Virtual Private Network provides a secure connection to remote users across a public network and into the enterprise network. | True |
| What is the result of a DHCP starvation attack? | Legitimate clients are unable to lease IP addresses. |
| VRRPv2 is a Cisco-proprietary FHRP that protects data traffic from a failed router or circuit | False |
| Which protocol advertises a virtual IP address to facilitate transparent failover of a Cisco routing device? | FHRP |
| A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is to drop f.... | Port security needs to be enabled on the interface |
| Which one is a HSRP state for a router? | speak |
| VRRPv2 is a Cisco-proprietary FHRP that is designed to allow for transparent failover of a first-hop IPv4 device. | False |
| What is the description of Authorization in AAA? | Determines what resources users can access or the operations they are allowed to perform |
| Which access control component, implementation, or protocol controls who is permitted to access a network? | authentication(-1) |
| Which feature or configuration on a switch makes it vulnerable to VLAN double-tagging attacks? | the native VLAN of the trunking port being the same as a user VLAN |
| In FHRP terminology, what represents a set of routers that present the illusion of a single router to hosts? | virtual router |
| Which one is a technique for mitigating VLAN attacks? | Enable trunking manually. |
| Which one command can be used to enable BPDU guard on a switch? | S1(config-if)# spanning-tree bpduguard enable |
| DDoS is a coordinated attack from many devices, called zombies, with the intention of degrading or halting public access to an organization’s website and resources. | True |
| Which FHRP implementation is Cisco-proprietary and permits only one router in a group to forward IPv6 packets? | HSRP for IPv6 |
| The following commands are executed on interface fa0/1 of 2950Switch. 2950Switch(config-if)#switchport port-security 2950Switch(config-if)#switchport port-security mac-address sticky | Only host A will be allowed to transmit frames on fa0/1. |
| What is an advantage of SSID cloaking? | Clients will have to manually identify the SSID to connect to the network. |
| Multiple Input / Multiple Output (MIMO) is a wireless technology that allows for significant increase in data throughput due to the use of multiple antennas and multiple data streams. | True |
| Which of the following answers apply to the IEEE 802.11g wireless standard? | 2.4 GHz frequency range |
| Which service can be used on a wireless router to prioritize network traffic among different types of applications so that voice and video data are prioritized over email and web data? | QoS |
| Wi-Fi Alliance – Promotes the growth and acceptance of WLANs. It is an association of vendors whose objective is to improve the interoperability of products that are based on the 802.11 standard | True |
| Which of the following are characteristic features of the IEEE 802.11n wireless standard? | Maximum data signaling rate of up to 600 Mbps |
| A network administrator deploys a wireless router in a small law firm. Employee laptops join the WLAN and receive IP addresses in the 10.0.10.0/24 network. Which service is used on the wireless router to allow the employee laptops to access the internet? | NAT |
| Which protocol can be used to monitor the network? | SNMP(it's tagged as wrong but is correct) |
| On a Cisco 3504 WLC dashboard, which option provides access to the full menu of features? | Advanced |
| A technician is about to install and configure a wireless network at a small branch office. What is the first security measure the technician should apply immediately upon powering up the wireless router? | Change the default user-name and password of the wireless router. |
| International Telecommunication Union (ITU) – Regulates the allocation of radio spectrum and satellite orbits. | True |
| A network administrator is working to improve WLAN performance on a dual-band wireless router. What is a simple way to achieve a split-the-traffic result? | Make sure that different SSIDs are used for the 2.4 GHz and 5 GHz bands. |
| Omnidirectional – focus the radio signal in a specific direction. | False |
| _______________________________________________________________________ | (3 wrong) (-2 possibly right) |
| In FHRP terminology, what represents a set of routers that present the illusion of a single router to hosts? | virtual router |
| Data Breach is a coordinated attack from many devices, called zombies, with the intention of degrading or halting public access to an organization’s website and resources. | False |
| What represents a best practice concerning discovery protocols such as CDP and LLDP on network devices? | Disable both protocols on all interfaces where they are not required. |
| This command shows the list of ports that are involved in the port channel and the time since the ports were bundled. | Show etherchannel summary |
| This command shows information about the status of a port that is involved in the Etherchannel. | Show interfaces fa0/2 etherchannel(-1) |
| Which protocol advertises a virtual IP address to facilitate transparent failover of a Cisco routing device? | FHRP |
| Which access control component, implementation, or protocol restricts LAN access through publicly accessible switch ports? | 802.1X |
| Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user? | accounting |
| Which FHRP implementation is a Cisco-proprietary protocol that suppports IPv6 load balancing? | GLBP for IPv6 |
| Which one is a HSRP state for a router? | listen |
| Which one Cisco solution help prevent DHCP starvation attacks? | Port Security |
| Which access control component, implementation, or protocol is based on device roles of supplicant, authenticator, and authentication server? | 802.1X |
| Refer to the exhibit. A network engineer is troubleshooting host connectivity on a LAN that uses a first hop redundancy protocol. Which IPv4 gateway address should be configured on the host? | 192.168.2.100 |
| GLBP is a Cisco-proprietary FHRP that protects data traffic from a failed router or circuit | True |
| Refer to the exhibit. PC1 and PC2 should be able to obtain IP address assignments from the DHCP server. How many ports among switches should be assigned as trusted ports as part of the DHCP snooping configuration? | 7(-2) |
| This command shows information about the reliability of the port channel. | Show etherchannel port-channel |
| Which one is a requirement for an HSRP group? | one or more standby routers |
| HSRP a non-proprietary election protocol that dynamically assigns responsibility for one or more virtual routers to the VRRP routers on an IPv4 LAN. | False |
| Which one is a technique for mitigating VLAN attacks? | Enable trunking manually. |
| Virtual Private Network include AAA services. | True |
| Which one is a HSRP state for a router? | learn |
| VPN or Virtual Private Network provides a secure connection to remote users across a public network and into the enterprise network. | True |
| Which one IEEE 802.11 wireless standards operate only in the 5 GHz range? | 802.11a |
| A network administrator is required to upgrade wireless access to end users in a building. To provide data rates up to 1.3 Gb/s and still be backward compatible with older devices, which wireless standard should be implemented? | 802.11ac |
| Autonomous APs – Standalone devices configured through a command line interface or GUI. Each autonomous AP acts independently of the others and is configured and managed manually by an administrator. | True |
| A QoS feature of WLAN Router varies. | True |
| Which one parameter would need to be changed if best practices are | AP password |
| The IEEE 802.11g standard is backwards compatible with? | 802.11b |
| What happens when an 802.11a node broadcasts within the range of an 802.11g access point? | The node transmits, but the access point is unable to receive. |
| Which is characteristic of satellite internet connection? | A. They are usually at least 10 times faster than analog modem connections. |
| Wireless LAN Controllers have Layer 2 switch ports and virtual interfaces that are created in software and are very similar to VLAN interfaces. | True |
| On a Cisco 3504 WLC Summary page ( Advanced > Summary ), which tab allows a network administrator to access and configure a WLAN for a specific security option such as WPA2? | WLANs |
| _______________________________________________________________________ | (4 wrong) |
| Which one is a requirement for an HSRP group? | exactly one active router |
| Which FHRP implementation is a nonproprietary IPv4-only election protocol which has one master router per group? | VRRPv2 |
| A network administrator configured routers R1 and R2 as part of HSRP group 1. After the routers have been reloaded, a user on Host1 complained of lack of connectivity to the Internet The network administra.... | the virtual IP address and the virtual MAC address for the HSRP group 1 |
| Which access control component, implementation, or protocol audits what users actions are performed on the network? | accounting |
| Which FHRP implementation is a nonproprietary protocol which relies on ICMP to provide IPv4 redundancy? | IRDP |
| VRRPv2 is a Cisco-proprietary FHRP that protects data traffic from a failed router or circuit | False |
| This command is used to check what port channel are configured on a switch. | Show etherchannel summary |
| Which one is the description of HSRP? | a Cisco proprietary FHRP that provides redundancy through use of an active device and standby device |
| Which access control component, implementation, or protocol is based on device roles of supplicant, authenticator, and authentication server? | 802.1X |
| Which statement is true regarding the use of PAgP to create EtherChannels? | It is Cisco proprietary |
| Data Breach is a coordinated attack from many devices, called zombies, with the intention of degrading or halting public access to an organization’s website and resources. | False |
| Which access control component, implementation, or protocol indicates success or failure of a client-requested service with a PASS or FAIL message? | authentication |
| Which type of VLAN-hopping attack may be prevented by designating an unused VLAN as the native VLAN? | VLAN double-tagging |
| Which FHRP implementation is a nonproprietary IPv4-only election protocol which has one master router per group? | VRRPv2 |
| Which one Cisco solution help prevent DHCP starvation attacks? | DHCP Snooping |
| A network administrator is configuring DAI on a switch with the command ip arp inspection validate src-mac. What is the purpose of this configuration command? | It checks the source MAC address in the Ethernet header against the sender MAC address in the ARP body. |
| Which one is a Cisco product that focuses on endpoint security solutions? | Adaptive Security Appliance |
| Network Access Control or NAC includes AAA services. | True |
| Which access control component, implementation, or protocol audits what users actions are performed on the network? | accounting |
| Which protocol is the Cisco proprietary implementation of FHRP? | HSRP |
| While attending a conference, participants are using laptops for network connectivity. When a guest speaker attempts to connect to the network, the laptop fails to display any available wireless networks. The access point must be operating in which mode? | passive |
| What is the function provided by CAPWAP protocol in a corporate wireless network? | CAPWAP provides the encapsulation and forwarding of wireless user traffic between an access point and a wireless LAN controller. |
| Which type of wireless network often makes use of devices mounted on buildings? | wireless metropolitan-area network |
| What is the function provided by CAPWAP protocol in a corporate wireless network? | CAPWAP provides the encapsulation and forwarding of wireless user traffic between an access point and a wireless LAN controller. |
| A network administrator deploys a wireless router in a small law firm. Employee laptops join the WLAN and receive IP addresses in the 10.0.10.0/24 network. Which service is used on the wireless router to allow the employee laptops to access the internet? | NAT |
| A laptop cannot connect to a wireless access point. Which troubleshooting step should be taken first? | Ensure that the wireless NIC is enabled |
| Which type of wireless network uses transmitters to provide coverage over an extensive geographic area? | wireless wide-area network |
| . A network administrator of a college is configuring the WLAN user authentication process. Wireless users are required to enter username and password credentials that will be verified by a server. Which server would provide such service? | RADIUS |
| Which type of wireless network uses transmitters to cover a medium-sized network, usually up to 300 feet (91.4 meters)? | wireless local-area network |
| A technician is configuring the channel on a wireless router to either 1, 6, or 11. What is the purpose of adjusting the channel? | to avoid interference from nearby wireless devices |
| Which is a method that is used by a wireless NIC to discover an AP? | transmitting a probe request |
| Mostly ________ is used in wireless LAN. | orthogonal frequency division multiplexing |
| _______________________________________________________________________ | (4 wrong) |
| Which one is the description for VRRP? | an open standard FHRP that provides redundancy through use of a virtual routers master and one or more backups |
| Data Breach is an attack in which an organization’s data servers or hosts are compromised to steal confidential information. | True |
| What is the step 3 of sequence of stages that occur during the HSRP failover process. | The new forwarding router assumes both the IP and MAC addresses of the virtual router. |
| Which one is the description of GLBP? | a Cisco proprietary FHRP that provides load sharing in addition to redundancy |
| Which access control component, implementation, or protocol is based upon usernames and passwords? | authentication |
| Which FHRP implementation is a nonproprietary IPv4-only election protocol with limited scalability? | VRRPv2 |
| VPN or Virtual Private Network provides stateful packet inspection, application visibility and control. | False |
| What device is considered a supplicant during the 802.1X authentication process? | the client that is requesting authentication |
| Which one is a HSRP state for a router? | Learn |
| Which FHRP implementation is a nonproprietary protocol which relies on ICMP to provide IPv4 redundancy? | IRDP |
| A junior network administrator was given the task of configuring port security on SwitchA to allow only PC_A to access the switched network through port fa0/1. If any other device is detected, the port is t... | Port security needs to be enabled on the interface. |
| Which statement is true regarding the use of PAgP to create EtherChannels? | It is Cisco proprietary |
| Select the action that results from executing these commands: | A dynamically learned MAC address is saved in the running-configuration file. |
| In the 802.1X standard, the client attempting to access the network is referred to as the supplicant. | True |
| Which access control component, implementation, or protocol controls who is permitted to access a network? | Authentication |
| Which access control component, implementation, or protocol logs EXEC and configuration commands configured by a user? | accounting |
| The Fa0/2 interface on switch S1 has been configured with the switchport port-security mac-address 0023.189d.6456 command and a workstation has been connected. What could be the reason that the Fa0/2 interface is shutdown? | The MAC address of PC1 that connects to the Fa0/2 interface is not the configured MAC address. |
| Which one is a technique for mitigating VLAN attacks? | Disable DTP |
| What mitigation plan is best for thwarting a DoS attack that is creating a MAC address table overflow? | Enable port security |
| Which protocol can be used to monitor the network? | SNMP |
| Which of the following are characteristic features of the IEEE 802.11n wireless standard? | 2.4 GHz frequency band |
| Which type of management frame may regularly be broadcast by an AP? | Beacon |
| Which type of wireless network is based on the 802.11 standard and a 2.4-GHz or 5-GHz radio frequency? | Wireless local-area network |
| Which one IEEE 802.11 wireless standards operate only in the 5 GHz range? | 802.11ac |
| What is a wireless security mode that requires a RADIUS server to authenticate wireless users? | enterprise |
| Which step is required before creating a new WLAN on a Cisco 3500 series WLC? | Create a new VLAN interface |
Created by:
Jsean-Ed_DR