Cisco ENCOR Infrastructure Security 3

Question 1

Which Cisco feature automatically shuts down a switchport when a BPDU is received on a PortFast-enabled port?

Accepted Answer

BPDU Guard

Answer

Root Guard

Answer

Loop Guard

Answer

UDLD

Question 2

What is the purpose of Unicast Reverse Path Forwarding (uRPF) in strict mode?

Accepted Answer

Verify that the return path for a packet's source IP goes back out the same interface

Answer

Encrypt unicast traffic

Answer

Rate-limit unicast flows

Answer

Block multicast spoofing

Question 3

Which type of VPN uses IPsec in tunnel mode to protect traffic between two site gateways?

Accepted Answer

Site-to-site VPN

Answer

Remote access VPN

Answer

DMVPN spoke

Answer

SSL VPN

Question 4

In IKEv2, what does the term 'IKE_AUTH' exchange accomplish?

Accepted Answer

Authenticates peers and creates the first Child SA (IPsec SA)

Answer

Establishes the IKE SA

Answer

Renegotiates existing SAs

Answer

Tears down the IKE SA

Question 5

What is the primary function of MACsec (IEEE 802.1AE)?

Accepted Answer

Encrypt and integrity-protect traffic at Layer 2 on a hop-by-hop basis

Answer

Authenticate network devices via 802.1X

Answer

Prevent MAC address flooding

Answer

Segment broadcast domains

Question 6

Which command enables TACACS+ as the authentication method for console login on a Cisco IOS device?

Accepted Answer

aaa authentication login default tacacs+

Answer

tacacs-server host

Answer

login authentication tacacs

Answer

aaa new-model tacacs