Cisco ENCOR Infrastructure Security

Question 1

What is the purpose of Control Plane Policing (CoPP) on a Cisco router?

Accepted Answer

Rate-limit traffic destined to the route processor

Answer

Encrypt control plane traffic

Answer

Filter data plane traffic

Answer

Authenticate routing protocol neighbors

Question 2

Which Cisco IOS feature can detect and block rogue DHCP servers on a LAN segment?

Accepted Answer

DHCP Snooping

Answer

Dynamic ARP Inspection

Answer

IP Source Guard

Answer

Port Security

Question 3

In a Zone-Based Firewall (ZBF), what happens to traffic between two zones that have no zone-pair policy defined?

Accepted Answer

Traffic is dropped

Answer

Traffic is permitted by default

Answer

Traffic is inspected

Answer

Traffic is logged only

Question 4

What does AAA stand for in Cisco network security?

Accepted Answer

Authentication, Authorization, Accounting

Answer

Access, Audit, Administration

Answer

Authentication, Audit, Authorization

Answer

Access, Authentication, Accounting

Question 5

Which protocol does Cisco TACACS+ use for transport?

Accepted Answer

TCP port 49

Answer

UDP port 49

Answer

UDP port 1812

Answer

TCP port 1812

Question 6

Which feature builds upon DHCP Snooping to prevent hosts from sending traffic with a spoofed source IP?

Accepted Answer

IP Source Guard

Answer

Dynamic ARP Inspection

Answer

802.1X

Answer

BPDU Guard