Cisco CCNA Cisco CCNA Network Security Fundamentals

Question 1

Which command enables port security on a Cisco switch interface and sets the maximum number of MAC addresses to 2?

Accepted Answer

switchport port-security maximum 2

Answer

port-security max-addresses 2

Answer

switchport security limit 2

Answer

ip port-security maximum 2

Question 2

What is the default violation mode for Cisco switch port security?

Accepted Answer

Shutdown

Answer

Restrict

Answer

Protect

Answer

Err-disable

Question 3

Which attack does DHCP snooping protect against on a switched network?

Accepted Answer

Rogue DHCP server attacks

Answer

MAC flooding attacks

Answer

ARP spoofing attacks

Answer

VLAN hopping attacks

Question 4

What security feature does Dynamic ARP Inspection (DAI) rely on to validate ARP packets?

Accepted Answer

DHCP snooping binding table

Answer

Static MAC address table

Answer

Port security database

Answer

ARP cache on the router

Question 5

Which command hardens a Cisco IOS device by encrypting all plaintext passwords currently in the running configuration?

Accepted Answer

service password-encryption

Answer

enable secret level 5

Answer

password encrypt all

Answer

crypto password enable

Question 6

Which type of VLAN attack allows a rogue device to send frames on a VLAN other than the one it is assigned to?

Accepted Answer

VLAN hopping

Answer

MAC spoofing

Answer

ARP poisoning

Answer

STP manipulation