ICND1 Network Security Basics 2

Question 1

Which command enables port security on a Cisco switch interface?

Accepted Answer

switchport port-security

Answer

The command 'switchport port-security' enables port security on a switch interface after setting it to access mode.

Question 2

What does the 'restrict' violation mode do when a port security violation occurs?

Accepted Answer

Drops packets from unknown MACs and increments a violation counter

Answer

The 'restrict' mode drops packets from unauthorized MAC addresses and increments the security violation counter without shutting down the port.

Question 3

Which AAA component is responsible for tracking the actions a user performs after being authenticated?

Accepted Answer

Accounting

Answer

Accounting records what a user does after being authenticated, such as commands executed and duration of access.

Question 4

What is the default behavior of a Cisco router when an ACL is applied to an interface but a packet does not match any ACE?

Accepted Answer

The packet is dropped

Answer

Every Cisco ACL has an implicit 'deny any' at the end, so unmatched packets are dropped by default.

Question 5

Which type of attack involves sending frames with a spoofed source MAC address to overflow a switch's MAC address table?

Accepted Answer

MAC flooding attack

Answer

A MAC flooding attack overwhelms the switch's CAM table with fake MAC addresses, causing the switch to behave like a hub and broadcast all traffic.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test