Cisco CCNA Cisco CCNA Network Security Fundamentals 2

Question 1

Which command configures a Cisco router login banner that is displayed before authentication?

Accepted Answer

banner login # message #

Answer

The 'banner login' command displays a message specifically before the username/password prompt, intended for legal warnings.

Question 2

What does the 'login local' command on a Cisco VTY line configure?

Accepted Answer

Authenticates users against the local username database

Answer

'login local' requires VTY connections to authenticate using username and password pairs stored in the device's local database.

Question 3

Which protocol encrypts the entire management session between an administrator and a Cisco device?

Accepted Answer

SSH

Answer

SSH (Secure Shell) encrypts all traffic between the client and the network device, while Telnet transmits data in plaintext.

Question 4

What is the purpose of the 'ip dhcp snooping limit rate' command on a Cisco switch port?

Accepted Answer

Limits the number of DHCP packets per second to prevent starvation attacks

Answer

'ip dhcp snooping limit rate' caps DHCP packet ingress rate on untrusted ports to mitigate DHCP starvation denial-of-service attacks.

Question 5

Which Cisco IOS command displays port security status including the number of secure MAC addresses on an interface?

Accepted Answer

show port-security interface

Answer

'show port-security interface <interface>' displays the port security configuration, violation count, and learned secure MAC addresses.

Cisco CCNA Practice Test