ICND1 Network Security Basics 3

Question 1

Which feature prevents rogue DHCP servers from assigning IP addresses on a network?

Accepted Answer

DHCP snooping

Answer

DHCP snooping filters DHCP messages and only allows DHCP server responses from trusted ports, blocking rogue DHCP servers.

Question 2

What type of ACL uses both source and destination IP address, port numbers, and protocol to filter traffic?

Accepted Answer

Extended ACL

Answer

Extended ACLs can filter traffic based on source/destination IP, protocol type, and source/destination port numbers for granular control.

Question 3

Which Cisco IOS command generates RSA keys needed for SSH operation?

Accepted Answer

crypto key generate rsa

Answer

The 'crypto key generate rsa' command creates the RSA key pair required before SSH can be enabled on a Cisco device.

Question 4

What is a 'man-in-the-middle' attack in the context of network security?

Accepted Answer

An attacker intercepts and potentially alters communications between two parties

Answer

In a man-in-the-middle attack, the attacker secretly relays and possibly modifies communications between two parties who believe they are communicating directly.

Question 5

Which command configures a Cisco router to use TACACS+ for login authentication?

Accepted Answer

aaa authentication login default group tacacs+

Answer

The 'aaa authentication login default group tacacs+' command configures TACACS+ as the authentication method for console and VTY logins.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

ICND1 Network Security Basics 3