ICND1 Network Security Basics 4

Question 1

Which type of VPN creates an encrypted tunnel between two routers over the public internet to connect branch offices?

Accepted Answer

Site-to-site VPN

Answer

A site-to-site VPN establishes a persistent encrypted tunnel between two network endpoints, typically routers, to connect geographically separated offices.

Question 2

What does the 'enable secret' command do differently than the 'enable password' command?

Accepted Answer

Stores the password as an MD5 hash instead of plaintext or weak Type 7 encryption

Answer

The 'enable secret' uses MD5 hashing, making it significantly more secure than 'enable password' which stores the password in a reversible format.

Question 3

Which attack exploits the IEEE 802.1Q trunking protocol to gain access to traffic on multiple VLANs?

Accepted Answer

VLAN hopping

Answer

VLAN hopping attacks, such as switch spoofing or double tagging, allow an attacker to send traffic to VLANs they are not authorized to access.

Question 4

What is the recommended best practice for securing unused switch ports?

Accepted Answer

Shut down the ports and assign them to an unused VLAN

Answer

Shutting down unused ports and assigning them to an unused VLAN prevents unauthorized devices from connecting to the network.

Question 5

Which IOS command displays the current port security settings and violation count for a specific interface?

Accepted Answer

show port-security interface

Answer

The 'show port-security interface' command displays port security configuration, learned MAC addresses, and any violation statistics for the specified interface.

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

(ICND1) Interconnecting Cisco Networking Devices Part 1 Practice Test

ICND1 Network Security Basics 4